Cloud Security Engineer

About this role

Fullscript seeks a Cloud Security Engineer to secure AWS and Google Cloud infrastructure protecting millions of patients' health data. You'll design cloud security controls, build infrastructure-as-code guardrails, operate security tooling, and partner with engineering teams to embed security into development workflows.

What you'll do

• Design and implement cloud security controls across AWS and Google Cloud with multi-account architecture and network segmentation
• Build reusable Terraform modules, policy-as-code guardrails, and self-service security tooling for engineering teams
• Operate CSPM/CNAPP tools to identify misconfigurations and security gaps across cloud environments
• Drive remediation of cloud vulnerabilities while balancing risk and business priorities
• Strengthen IAM, secrets management, and machine identity controls across cloud and SaaS platforms
• Embed security into CI/CD pipelines through scanning, SBOM generation, and supply chain controls

What they're looking for

• AWS and Google Cloud security (2+ years required)
• Infrastructure-as-code with Terraform
• Python, Go, or similar programming languages
• Cloud-native attack paths and IAM security
• CI/CD pipeline security integration
• Compliance frameworks (SOC 2, HIPAA, HITRUST, PCI-DSS, ISO 27001)
• CSPM/CNAPP tools (Wiz, Prisma Cloud, Lacework)
• Container and supply chain security

Benefits

• Salary: $100,000–$110,000 CAD
• Remote-first with preferred locations in Ottawa, Toronto, Calgary, or Vancouver
• Flexible PTO and competitive pay
• RRSP/401k match and stock options
• Premium customizable benefits package with paramedical services and HSA
• Continuous learning and professional development opportunities