Spécialiste en cybersécurité - Cyber Security Specialist

TobogganLabs • Montreal, QC

7d • Remote

About The Position

We're seeking a Cybersecurity Specialist to join our team as a senior security resource embedded in client engagements. In this role, you will design and implement comprehensive security programs across cloud and enterprise environments, working directly with client teams to embed security into their infrastructure, identity management, and operations. You will serve as a trusted security advisor, translating technical risk into actionable strategy. Note that while we specialize in healthcare and regulated industries, not all our projects are in these fields, so you may work across different domains from time to time.

Requirements

• Proven track record designing and implementing security solutions in production environments.
• Most clients run AWS, Terraform, GitHub Actions or similar CI/CD tooling, and modern identity providers.
• Comfortable moving between security strategy and hands-on execution, and communicating effectively with both technical and non-technical stakeholders.
• Ability to read a threat model and a Terraform module in the same afternoon.
• 5+ years of experience in infrastructure, DevOps, or security engineering.
• Hands-on experience with AWS or Azure infrastructure and infrastructure-as-code tools (Terraform, CloudFormation, or equivalents).
• Deployed and administered Okta or similar identity providers (Azure AD, Google Workspace), including SSO, MFA, SCIM provisioning, and access governance.
• Experience with MDM / endpoint management solutions and device security policies.
• Familiar with compliance frameworks such as SOC 2, HIPAA, ISO 27001, or equivalents, and have participated in audit processes.
• Excellent communication skills and can explain complex security and infrastructure concepts clearly and accessibly.
• Adaptable, self-directed, and comfortable in dynamic client environments.
• Can explain security trade-offs and connect them to business needs.

Nice To Haves

• Experience in client-facing roles (consulting, implementation engineering, advisory services).
• Experience in healthcare or other heavily regulated industries.
• Experience in software development beyond basic scripting (feature, API, or application development).
• Experience with container security, Kubernetes, or cloud-native security tools.
• Experience automating security processes using scripts (Python, Bash) or workflow tools (Okta Workflows, Tray.io, Workato).
• Relevant certifications (AWS Security Specialty, CISSP, or equivalents).

Responsibilities

• Design, implement, and maintain security controls across cloud environments (AWS, Azure), including network segmentation, encryption, system hardening, and vulnerability management.
• Architect and administer identity and access solutions including SSO, MFA, SCIM provisioning, privileged access management, and Zero Trust frameworks.
• Build security automation pipelines, detection rules, and incident response playbooks; support continuous compliance monitoring and audit evidence collection.
• Own the security workstream end-to-end, guide client teams on architectural decisions, and shape strategic security direction.
• Mentor colleagues on security best practices, contribute to internal security tools and standards, participate in interviews and internal presentations.

Benefits

• Home office/technology budget
• Yearly professional development budget
• Company matching RRSP after 1 year
• 100% employer-paid health & dental insurance including a yearly bank of coverage for complementary medicine (Acupuncture, osteopathy, massage therapy, naturopathy, psychology, etc.)
• Life, long & short-term disability insurance
• Parental leave top-up (8 weeks), available to employees with 1+ year of tenure, regardless of path to parenthood.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed