Principal Cloud Security Engineer (AWS)

Location: Remote - Canada

Company

Provides secure access solutions that help individuals and organizations manage applications, credentials, and AI access from the browser.

What you will do

• Define and drive cloud security principles, standards, and reference architectures.
• Partner with DevOps, CI/CD, platform, architecture, and engineering teams to build and operate secure products and services.
• Design and implement security processes and controls for security, compliance, and audit requirements.
• Research emerging threats and attack vectors proactively.
• Embed shift-left security practices throughout the software development lifecycle.
• Implement and manage cloud and Kubernetes security posture management tooling for containerized workloads.

Requirements

• Proven experience with AWS and AWS security services, including IAM, Config, KMS, Secrets Manager, CloudWatch, CloudTrail, and GuardDuty.
• Experience supporting engineering teams with shift-left security practices.
• Infrastructure-as-code experience with AWS CDK, CloudFormation, or Terraform, plus GitLab and GitLab CI.
• Hands-on experience with Kubernetes, AWS EKS, Docker, AWS ECS, admission controllers, and supply chain security.
• Solid understanding of TCP/IP, TLS, and VPN protocols.
• Good written and verbal English communication skills; the role is remote in Canada.

Nice to have

• AWS Certified Security – Specialty certification or a similar qualification.
• Familiarity with AI tools and large language models, including Claude and AWS Bedrock.

Culture & Benefits

• Remote-first culture with flexible remote-centric work arrangements.
• Competitive compensation and comprehensive health coverage, including dependents.
• Flexible paid time off, quarterly self-care days, volunteer days, and parental leave.
• Home office setup support and a remote work stipend.
• Annual learning stipend and continuous learning and development opportunities.
• Employee assistance and peer-to-peer recognition programs.