Cloud Security Engineer (Microsoft M365Azure)

Location: Toronto, Ontario, Canada
Work Model: Hybrid (3 days onsite)
Salary Range: $110,000 – $120,000 CAD
Employment Type: Fulltime
Experience Level: MidSenior (5+ years)

Required Technology Focus: Microsoft 365, Azure, Microsoft Security Stack
Keywords: Cloud Security Engineer, Azure Security Engineer, Microsoft 365 Security

Job Summary

The Cloud Security Engineer is responsible for designing, implementing, and maintaining security controls across Microsoft Azure and Microsoft 365 environments. This role supports Zero Trust architecture, cloud security posture management, endpoint security, identity and access management, threat detection, SIEM/SOAR, and compliance frameworks.

This position requires handson experience with Microsoft security services, including Microsoft Defender, Sentinel, Intune, Entra ID (Azure AD), and Azure Security services.

Key Responsibilities

CloudSecurity Architecture

Design, implement, and maintain Zero Trust security architecture in Azure and Microsoft 365
Secure cloud infrastructure using Azure Security Center / Defender for Cloud
Implement Azure RBAC

IdentityAccess Management (IAM)

Manage Microsoft Entra ID (Azure Active Directory)
Configure Conditional Access, MFA, SSO, PIM (Privileged Identity Management)
Implement identity governance and access reviews

EndpointDevice Security

Implement and manage Microsoft Intune
Enforce device compliance policies, endpoint security policies, and app protection
Support modern endpoint management (Windows, mobile devices)

Threat DetectionResponse

Deploy and optimize Microsoft Defender for Endpoint, Defender for Cloud, Defender for Identity
Support Microsoft Sentinel (SIEM/SOAR), with partner.
Participate in incident response, investigations, and remediation

Nice to have-Cloud Network Security

Support and secure Azure Firewalls, WAFs, VPNs, NSGs
Collaborate on secure cloud network design

Security OperationsAutomation

Automate security tasks using PowerShell, Azure CLI, Terraform, Python
Support vulnerability management and system hardening
Perform security posture assessments and risk analysis

Compliance, GovernanceAudit

Support compliance frameworks including CIS, NIST, ISO 27001, GDPR
Assist in audit preparation, governance, and compliance reporting
Support Microsoft Purview and compliance tooling

Required Qualifications

5+ years of experience in Cloud Security Engineering
Strong handson experience with Microsoft Azure and Microsoft 365 security
Demonstrated experience with:
- Microsoft Intune
- Microsoft Defender (Cloud, Endpoint, Identity)
- Azure AD / Entra ID
- Conditional Access, MFA, PIM
- Security Baselines
- VPNs, Firewalls, Web Application Firewalls (WAF)
Experience with:
- Incident Response in Azure and M365
- Vulnerability management
- Security automation and scripting
Strong verbal and written communication skills

NicetoHave Skills

Experience with Qualys, Lansweeper, Global Secure Access
Security automation and scripting
Exposure to DevSecOps practices

Certifications (Preferred)

AZ500: Microsoft Azure Security Technologies
SC200: Microsoft Security Operations Analyst
SC100: Microsoft Cybersecurity Architect
Microsoft Certified: Endpoint Administrator / Intune Specialist

About TPH

TPH operates 60+ production centres across Canada, enabling local, sustainable, and efficient print production. TPH has been recognized as North America's most forestfriendly printer and one of Canada's Greenest Employers.

DiversityAccessibility Commitment

TPH is an equal opportunity employer committed to diversity, inclusion, and accessibility. Accommodation is available throughout the recruitment process upon request.

The Printing House

New Jobs

Cloud Security Engineer