AI Security Architect

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US
. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India
. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

AI Security Architect

On site in Toronto, Ottawa, or Montreal - strong preference for candidates based in one of these cities.

Contract - 6 months initial term, with strong likelihood of extension or conversion to permanent.

AI & Enterprise Security Architecture
- Security Architecture Group

$70 to 80/hr

About the Role

Client is looking for an experienced security architect to join its Security Architecture group, with a specialized focus on securing AI systems and designing AI-enabled security controls. This is a hands-on architecture role - you will design and pressure-test security patterns for AI systems, particularly the Microsoft and Azure AI stack, including Copilot. You will also evaluate vendor tools and help the team scope and run proof of concepts, rather than carry out deep, hands-on implementation work.

You will work closely with engineering, data science, security, and governance teams. You will need to be comfortable talking directly with stakeholders, and translating complex AI security concepts for both technical and non-technical audiences.

What You'll DoAI security architecture

• Architect security controls for AI and GenAI systems, with a strong focus on the Microsoft and Azure AI ecosystem
  - Azure AI, Copilot, and emerging Microsoft AI and agent tooling.
• Write and review security patterns for securing AI agents, codifying best practices and reusable controls.
• Work in a lab environment to pressure-test how AI systems integrate, identify security gaps, and design compensating controls. This is architectural analysis, not formal penetration testing.
• Contribute to market scans of AI security tooling, such as Microsoft Agent 365 and Service Now Control Tower, and validate shortlisted vendor solutions.

Vendor evaluation and proof of concept management

• Help the team cut through vendor noise - talks with a large number of software sellers and needs someone who can help assess and prioritize.
• Scope, define, and manage proof of concepts for selected vendor solutions.
• Identify and document relevant use cases.

Enterprise security architecture

• Support security architecture reviews across platforms, journeys, and infrastructure.
• Contribute to security architecture governance - principles, roadmaps, and standards.
• Advise on technology stack suitability, security controls, and risk mitigation for complex, distributed solutions.

What We're Looking For

• 10+ years in cybersecurity, with a background in security architecture.
• Hands-on experience designing and architecting security controls - comfortable operating deeper than a surface level, even without heavy implementation experience.
• Strong working knowledge of Azure and the Microsoft AI ecosystem;
  Copilot and related Microsoft AI tooling experience is a must.
• Solid understanding of AI and ML concepts and architectures (e.g., Tensor Flow, PyTorch) and threat modeling techniques (STRIDE, DREAD, PASTA).
• Comfortable in ambiguity - able to jump in quickly, engage stakeholders directly, and drive work forward.
• Strong communication skills, with the ability to explain complex AI security risk to both technical and non-technical audiences.
• Experience with cloud security architecture
  - Azure primary; AWS or GCP a plus.
• Mid-size enterprise experience is welcome; this role does not require large-scale enterprise background specifically.

Nice to Have

• Financial services or banking industry experience.
• Familiarity with regulatory and risk frameworks such as NIST AI RMF or ISO/IEC 27001.
• Familiarity with MITRE frameworks - ATLAS, ATT&CK, CAPEC, D3
  
  FEND.
• Application security experience.
• Certifications such as CISSP, CCSP, or OSCP - an asset, not required. You don't need deep expertise in all three focus areas above. Strength in any one - AI security patterns, vendor and proof-of-concept evaluation, or application security - is valuable, provided your foundational security architecture skills are solid.

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other…