Consultant​/Senior Consultant Cloud Security

Overview

At KPMG, you will be part of a diverse team of committed professionals driven by a common goal: helping our clients overcome their technological, organizational, and cybersecurity challenges.

As part of this mission, we are seeking a Cloud Security Specialist. This key role supports the strengthening of our capabilities in cloud security and architecture, with a particular focus on Microsoft solutions.

The selected candidate will be involved in advisory work, the design of secure architectures, as well as the implementation and maintenance of secure cloud foundations for our clients, and, when required, provide support in the event of an incident.

• Advise and support clients in defining secure cloud architectures, primarily on Microsoft Azure, using frameworks such as the Cloud Adoption Framework (CAF) and the Well‑Architected Framework (WAF).
• Design and deliver Azure Landing Zone–type cloud environments—preferably using Infrastructure as Code (IaC)—that comply with best practices in security, governance, and operations.
• Participate in the definition of cloud governance models (identity management, network segmentation, logging, monitoring, compliance).
• Deploy and configure cloud security controls, including CNAPP solutions, alerting mechanisms, and continuous monitoring.
• Assess an environment, analyze security recommendations (Microsoft Defender for Cloud, CNAPP tools, benchmarks, etc.), and oversee their implementation.
• Collaborate with infrastructure, cybersecurity, and governance teams to ensure consistent integration of security controls.
• Automate the deployment of resources, configurations, and security controls using Infrastructure as Code (IaC).
• Produce high‑quality deliverables (target architectures, design documents, security posture reports, executive recommendations).
• Stay up to date with developments in cloud platforms and cloud security solutions.

• Degree in information technology, cybersecurity, computer science, or a related field.
• Minimum of 3 years of experience in cloud security, cloud architecture, or infrastructure security.
• Strong knowledge of Microsoft Azure, including:
  • Cloud Adoption Framework (CAF)
  • Well‑Architected Framework (WAF)
  • CIS
  • Native Azure security (Entra , networking, logging, Defender for Cloud, Git Hub Advanced Security, etc.)
• Knowledge of at least one other cloud provider (AWS or GCP) is a strong asset.
• Experience with Infrastructure as Code (IaC), particularly Bicep and/or Terraform, including:
  • Resource deployment
  • Secure configuration
  • Azure Policies and compliance controls
• Experience with cloud security and CNAPP solutions.
• Excellent communication, analytical, and project management skills.
• Ability to operate in complex environments and influence both technical and non‑technical stakeholders.
• Relevant certifications (AZ‑500, AZ‑305, CCSP, CISSP, AWS Security, etc.) are an asset.

The selected candidate must demonstrate excellent communication and presentation skills, with the ability to explain and simplify complex technical and architectural concepts for a variety of audiences. While being primarily francophone, they must also be able to work and present in English, as some of our clients are located in English‑speaking regions of Canada.

Providing you with the support you need to be at your best

Integrity
, we do what is right |
Excellence
, we never stop learning and improving |
Courage
, we think and act boldly |
Together
, we respect each other and draw strength from our differences |
For Better
, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier‑free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide…