Specialist Cloud Security

Posting Start Date: 11/10/26
Join CPKC, North America’s first transnational railroad connecting U.S., Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career—you’re part of something bigger. Together, we move goods, connect people, and create lasting change. Your future starts here.
PURPOSE OF THE POSITION:As a Cloud Security Engineer, you will play a key role in protecting and advancing our cloud platforms by implementing and enhancing security controls across AWS and Azure environments. You will collaborate closely with cloud engineers, architects, and business stakeholders to identify and remediate security risks, support the design of secure and scalable cloud solutions, and help drive security best practices throughout the organization. This is an exciting opportunity to work with leading cloud technologies, security automation, and Infrastructure as Code (IaC) while making a direct impact on the security, reliability, and future growth of our enterprise cloud environment.
POSITION ACCOUNTABILITIES:
Develop and maintain existing Infrastructure as Code (IaC) solutions to standardize, automate, version-control, and reliably provision security controls in our cloud environments
Implement security best practices, including identity and access management, encryption, network segmentation, secrets management, logging, threat detection, and incident response controls
Partner with Enterprise Security, Enterprise Architecture, and product teams to ensure cloud environments are secured
Design, implement, and maintain secure cloud infrastructure solutions across AWS and Azure environments, ensuring scalability, reliability, and operational excellence
POSITION REQUIREMENTS:
Post-secondary degree or diploma in Information Technology, Cybersecurity, Computer Science, or a related field, or an equivalent combination of education and industry experience
6+ years of experience in cloud infrastructure, cloud engineering, cybersecurity, or related technical roles
4+ years of hands-on experience designing, deploying, and operating production workloads in AWS
Demonstrated experience with AWS monitoring, governance, and security services, including Amazon CloudWatch, CloudTrail, AWS Config, GuardDuty, AWS Organizations, AWS IAM, API Gateway, EventBridge, SNS, and SQS
Proven experience implementing secure cloud networking, encryption, secrets management, and Infrastructure as Code (IaC) solutions using Amazon VPC, Security Groups, Route 53, Transit Gateway, Azure VNets, Azure Network Security Groups, AWS KMS, AWS Secrets Manager, Azure Key Vault, Terraform, and AWS CloudFormation
Valid passport with the ability to travel within Canada and the United States without restrictions, as required by the role
WHAT CPKC HAS TO OFFER:
Flexible and competitive benefits package
Competitive company pension and/or retirement plans
Employee share purchase plan
Performance incentive plan
Annual fitness subsidy
Part-time studies program
PRE-EMPLOYMENT REQUIREMENTS:Background Investigation
Criminal history check
Education verification
Professional references
BECOMING A RAILROADER:As an employee with a North American presence, the possibility does exist that the location of your position may be changed based on organizational requirements.
Management Conductor ProgramBecoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business at CPKC. You may be required to obtain a certification or to maintain your current certification/qualification as a conductor or locomotive engineer.
CULTURE OF INCLUSION:For our U.S. applicants, CPKC is an equal opportunity/affirmative action employer, inclusive of protected veterans and individuals with disabilities. For Canadian applicants CPKC is an employment equity employer committed to the principles of employment equity and inclusion. We encourage all qualified candidates to apply including: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities. Accommodations for the job application process can be provided, as appropriate, upon request. All applicant information will be managed in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).
Req ID: 106679
Department: Information Services & Network Service Centre (NSC)
Job Type: Full-Time
Position Type: Non-Union
Location: Calgary, Alberta
Country: Canada
% of Travel: 0-10%
# of Positions: 1
Job Grade: 4
Job Available to: Internal & External
#J-18808-Ljbffr