Location : Toronto ON (Onsite)
OVERVIEW
The Senior Technology Architect (Cyber Security) will lead the design and development of secure-by-design enterprise solutions across cloud SaaS and hybrid environments. The role involves conducting full-lifecycle security architecture assessments defining reusable security patterns ensuring compliance with industry frameworks and working closely with product engineering and operations teams.
This is a highly consultative senior-facing position requiring deep expertise in security architecture SIEM platforms identity management cloud security and stakeholder engagement.
KEY RESPONSIBILITIES
• Define security requirements and translate them into enterprise architecture designs .
• Develop reusable secure-by-design patterns for cloud (IaaS / PaaS) SaaS and hybrid solutions.
• Architect identity and access controls : SSO MFA PKI OAuth / OIDC SAML RBAC / ABAC .
• Design infrastructure security controls including network segmentation firewalls NSGs SASE and micro-segmentation.
• Specify data-protection controls : KMS / Vault TDE tokenization DLP database monitoring .
• Integrate logging events and alerts into SIEM platforms (Splunk Cloud Azure Sentinel) and SOAR workflows.
• Provide implementation guidance on IaC templates cloud hardening and logging agents.
• Facilitate architecture review boards and security design workshops.
• Ensure architecture alignment with TOGAF NIST CSF CIS Controls and organizational standards.
MUST-HAVES
• 7 years experience as a Security Architect or Enterprise Architect with a security focus.
• Hands-on expertise with SIEM platforms (Splunk Cloud or Azure Sentinel) .
• Experience with ServiceNow design and integrations for CSOC monitoring and threat use cases.
• Strong stakeholder-management experience with client-facing solution design.
• Experience developing enterprise information security programs (e.g. DLP insider risk mgmt. governance).
• Deep expertise across :
Identity & Access Management (SSO MFA PKI SAML / OIDC / OAuth)
• Infrastructure & Network Security
• Data Protection & Encryption
• Application Security and Secure SDLC
• Cloud Security (Azure / AWS / GCP)
NICE-TO-HAVES
• Experience working in public sector or highly regulated environments.
• Knowledge of compliance standards such as FIPPA PHIPA PCI DSS AODA ISO 27001 .
• Experience with :
SOAR automation
• EDR tools (Microsoft Defender Cortex XDR)
• Container and serverless security
Key Skills
Abinitio,Change Management,Exploration,Building Maintenance,Civil Quality Control,Catia
Employment Type : Full Time
Experience : years
Vacancy : 1