Senior Technical Specialist

We welcome applications from all qualified job seekers. Should you require any accommodations, including alternative interview formats, assistance with online assessments, or an ASL interpreter, throughout the application or hiring process, please email your request to [email protected] – we are committed to ensuring an accessible experience for all candidates.
At ICBC, we strive to build diverse teams which reflect the communities we serve. To support this, we’ve created two talent communities for Indigenous Peoples and People with Disabilities. By joining one of these communities, you’ll connect with our recruitment team who will guide you through the application process and help you explore opportunities at ICBC. Of course, you’re welcome to apply for jobs at ICBC whether or not you join a talent community.
We look forward to hearing from you!
The Information Services Division is currently looking for a Senior Technical Specialist. In this position, you will provide senior-level technical leadership for the design, implementation, governance, and operation of cloud security services and controls across Amazon Web Services (AWS), Microsoft Azure, and hybrid environments. You will serve as a cloud security subject matter expert, guide technical teams, and help advance the organization’s cloud security capabilities
Your responsibilities will include:
• Leading, coordinating, and delivering cloud security projects and initiatives of varying complexity across AWS, Azure, and hybrid environments;
• Demonstrating an understanding of cloud security governance frameworks, standards, and benchmarks to support alignment of cloud security initiatives with organizational risk requirements and Enterprise Architecture guidance;
• Providing advanced-level technical consultation as the cloud security subject matter expert to IT Security, Cloud Security Platforms, Architecture, Infrastructure, Application Development, DevOps, and Project teams;
• Assist in the designing, assessing, and validating AWS and Azure security controls, including identity and access management, privileged access, network segmentation, encryption and key management, secrets management, logging and monitoring, workload protection, data protection, backup and recovery, and policy enforcement;
• Assist in establishing and maintaining secure cloud landing-zone requirements, account and subscription guardrails, policy-as-code controls, exception processes, and compliance reporting;
• Leading the technical evaluation, proof of concept, deployment, integration, tuning, and sustainment of Cloud-Native Application Protection Platform (CNAPP), Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), and related capabilities;
• Leading exposure management initiatives across cloud environments, including the identification, prioritization, validation, and remediation of security exposures, vulnerabilities, misconfigurations, and attack paths, and translating findings into practical operational actions and measurable risk reduction outcomes
• Assist in improving cloud application security throughout the system development life cycle by integrating security into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), infrastructure-as-code scanning, container and image scanning, secrets detection, and supply-chain controls;
• Lead the implementation of WAAP and other application security controls, including API discovery and inventory, authentication and authorization, schema validation, rate limiting, secrets and token protection, vulnerability testing, runtime monitoring, and protection against OWASP API Security Top 10 risks;
• Triaging complex cloud security alerts, vulnerabilities, misconfigurations, and incidents; determining risk and priority; coordinating containment and remediation; and providing clear technical direction to junior SOC analysts and operational teams;
• Developing cloud-focused security monitoring, detection, investigation, and response use cases using relevant AWS, Azure, CNAPP, SIEM, and SOAR telemetry;
• Leading or supporting cloud security incident response activities, including evidence preservation, root-cause analysis, recovery validation, lessons learned, and improvements to preventive and detective controls;
• Defining sustainment roadmaps and service improvements for cloud security platforms and controls, including operational processes, metrics, control ownership, capacity, integrations, licensing, and vendor support;
• Assist in clear technical designs, standards, procedures, risk assessments, decision records, executive summaries, and operational runbooks;
• Acting as a liaison with technology teams, cloud security service providers, vendors, Procurement, Contracts, Legal, Privacy, Risk, Audit, and Finance as required.
Position Requirements
The ideal candidate should exhibit the following skills and experience:
• Significant hands-on experience securing enterprise workloads and services in both AWS and Microsoft Azure, including native security controls and shared-responsibility considerations;
• Demonstrated knowledge of AWS security services such as AWS Organizations, Control Tower, IAM, IAM Identity Center, Security Hub, GuardDuty, Inspector, Macie, CloudTrail, Config, KMS, Secrets Manager, WAF, Shield, Network Firewall, and Security Lake;
• Demonstrated knowledge of Azure security services such as Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure Policy, Defender for Cloud, Microsoft Sentinel, Key Vault, Azure Firewall, Web Application Firewall, Private Link, Network Security Groups, and Azure Monitor;
• Hands-on experience evaluating, deploying, integrating, or operating CNAPP and CSPM technologies, including posture management, workload protection, entitlement management, attack-path analysis, vulnerability management, and cloud asset inventory;
• Strong application and DevSecOps security knowledge, with practical experience integrating security scanning and quality gates into CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins;
• Practical knowledge of container, Kubernetes, serverless, infrastructure-as-code, software supply-chain, and secrets-management security;
• Experience assessing and securing APIs and API gateways, including OAuth 2.0, OpenID Connect, JSON Web Tokens, service identities, authorization models, input validation, abuse prevention, and runtime monitoring;
• Advanced analytical and troubleshooting skills, with experience triaging cloud security alerts and incidents across identity, network, application, workload, and data layers;
• Experience in cybersecurity incident response, including investigation, containment, eradication, recovery, stakeholder coordination, and post-incident improvement;
• Ability to mentor and provide technical guidance to junior SOC analysts, including investigation methodology, escalation criteria, evidence quality, and clear documentation;
• Working knowledge of SIEM/SOAR platforms and cloud security telemetry, preferably Microsoft Sentinel and relevant AWS and Azure logging sources;
• Experience translating technical cloud security risks into practical remediation plans and communicating effectively with technical teams, management, risk owners, auditors, and vendors;
• Ability to manage multiple priorities, lead technical initiatives, and work collaboratively across security, infrastructure, cloud security platform, architecture, and application delivery teams;
• Proven written and verbal communication skills, including the ability to produce standards, architecture guidance, operational runbooks, risk summaries, and executive-ready recommendations.
Education and Professional Certifications
• A diploma or degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or an equiv

View and apply on HireChats