Smile Digital Health

Smile Digital Health

Senior Cloud Security Engineer (Remote Canada)

Toronto, Ontario · Senior

Sponsorship not specifiedCAD 130k-CAD 145kDetected 5 days ago
GitAWSAzureKubernetesTerraformAnsibleCI/CDGitHub ActionsDevOpsPlatform EngineeringCybersecurityMicrosoft DefenderDetection EngineeringIncident ResponseComplianceFirewallZero TrustHIPAAHL7/FHIRCommunicationBurp SuiteCISSP

About the role

  • Working for a company like Smile Digital Health means supporting our mandate for #BetterGlobalHealth.
  • We were #19 on Deloitte's Technology Fast 50 Ranking for 2024!
  • We help generate and liberate structured healthcare data to ensure effective delivery across care teams and health systems bringing #BetterGlobalHealth to patients everyday!

Responsibilities

  • Design, implement, and continuously improve cloud security architecture and controls across Azure-based environments.
  • Own and operate cloud security posture management (CSPM) using Prisma Cloud - configure policies, monitor posture, triage findings, and drive remediation with engineering teams.
  • Deploy, tune, and manage Microsoft Defender for Cloud (and related Defender suite products) across Azure subscriptions; investigate alerts and drive incident response.
  • Integrate SAST and DAST tooling into CI/CD pipelines; triage findings, define severity thresholds, and partner with developers to close vulnerabilities prior to production release.
  • Own the RBAC governance process: design role models, conduct periodic access reviews, enforce least-privilege principles, and document role assignments across Azure and application layers.
  • Collaborate with DevOps and Platform Engineering teams to embed security controls (secrets management, image scanning, policy-as-code) into DevOps pipelines and IaC workflows (Terraform, Ansible).
  • Lead and educate internal teams and clients on cloud security best practices, secure-by-design patterns, and zero-trust principles.
  • Document security runbooks, post-incident reviews, threat models, and lessons learned; maintain a living security knowledge base.

Requirements

  • Proven, production-level experience with Prisma Cloud (CSPM/CWPP) - policy management, alert triage, and remediation workflows.
  • Hands-on experience with Microsoft Defender for Cloud and the broader Microsoft Defender suite (Defender for Servers, Containers, Identity, Endpoint).
  • Solid IaC experience with Terraform and/or Ansible
  • ability to write and review security-hardened infrastructure code.
  • Experience with Kubernetes / OpenShift and container security (runtime protection, admission controllers, image policies).

Nice to have

  • experience supporting audits and mapping technical controls.
  • Professional cloud or security certifications preferred (e.g., AZ-500, MS-500, SC-200, CCSP, CISSP, or equivalent).
  • Excellent written and verbal communication skills
  • ability to convey complex security concepts to both technical and non-technical stakeholders

Skills

  • Provide Level 3 escalation for security incidents; participate in on-call rotation for incident response and forensic triage.

Compensation

  • Some of the benefits we offer: * Remote Work Environment * Flexible Time Away From Work Policy including PTO, Personal and Sick Days * Competitive Salary and Health/Medical Benefits * RRSP/TFSA/401K Employee Contribution * Life and Disabili

Benefits

  • We are dedicated to fostering a workplace that values diversity, equity, and inclusion.
  • We strive towards this goal every day, and the results can be seen in the impact of our innovative health data platform and data management solutions, which are used in over 20 countries.
  • Smile Digital Health makes it easy for healthcare stakeholders to collect and exchange data with our leading FHIR-based data liberation platform.
  • At its heart, the Smile platform enables people and organizations to better manage healthcare data.
  • Act as SME for security compliance frameworks relevant to healthcare data (SOC 2, HIPAA, ISO 27001, PHIPA/PHIPPA); map controls and support audits.

Company info

  • We are big on creating a sense of belonging and empowering each other to bring our authentic selves to work.
  • The Senior Cloud Security Engineer is responsible for designing, automating and deploying production grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and GCP.
Apply directly at Smile Digital Health →Create a free account for alerts like thisView Smile Digital Health immigration profile

This listing is sourced directly from Smile Digital Health's careers page and normalized into a canonical job model.