Principal Cloud Security Engineer

BMO U.S.

Senior Cloud Security Engineer at BMO designing and implementing security solutions across AWS, Azure, and AI/ML platforms. Driving cybersecurity governance and data protection strategies.

Posted 5/8/2026full-timeChicago • California, Florida, Illinois, Texas • 🇺🇸 United StatesLead💰 $122,400 - $228,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudJavaScriptNode.jsPythonPyTorchTensorflow

About the role

Key responsibilities & impact

Assess, design, implement, automate, and document security solutions, controls, and processes for Amazon Web Services (AWS) and Microsoft Azure cloud platforms
Develop and maintain security patterns for cloud platforms and services; assess all cloud patterns to ensure adherence to best security practices and controls
Design and implement security baseline controls for Cloud Services for integration into the CI/CD process
Build and deliver policies as code, automating security controls and best practices
Be the cloud security subject matter expert for the Cloud Engineering group and its partners in any IaaS, PaaS, and SaaS implementations
Define and implement a security framework for AI/ML systems, covering the full model lifecycle from data ingestion and training to deployment and monitoring
Implement and manage data security posture management (DSPM) tools to continuously monitor sensitive data exposure across cloud environments
Provide subject matter expertise on architecture, authentication, and systems security based on a clear understanding of the engineering stack, services, and data flow

Requirements

What you’ll need

A university degree in Engineering, Computer Science, Information Technology, or a related field
7-10 years of experience developing and implementing security architectures and/or engineering, with demonstrated breadth across cloud, data, and/or AI security domains
Security certifications such as CISSP, CCSP, CCSK, or any Cloud Security Specialty certification (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate)
Demonstrated knowledge of cloud architecture, cloud operations, cloud-based identity and access management, security automation, and orchestration
Extensive experience with cloud-native security solutions and tools (e.g., AWS Security Hub, AWS GuardDuty, Microsoft Defender for Cloud, Azure Sentinel)
Working knowledge of AI/ML development frameworks and platforms (e.g., TensorFlow, PyTorch, SageMaker, Azure ML) and associated security risks
Experience implementing data loss prevention (DLP), data classification, and data access governance solutions in enterprise environments
Strong scripting and programming skills with experience in Python, PowerShell, Bash, Node.js, and API/webhook development

Benefits

Comp & perks

Health insurance
Tuition reimbursement
Accident and life insurance
Retirement savings plans

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security architecturecloud securitydata security posture managementsecurity automationscriptingprogrammingdata loss preventiondata classificationidentity and access managementAI/ML security

Certifications

CISSPCCSPCCSKAWS Certified Security SpecialtyMicrosoft Certified: Azure Security Engineer Associate