Cybersecurity Architect

Location: Toronto

The Cybersecurity Architect is responsible for supporting projects that apply new and existing technologies and solutions to solve business needs in the cybersecurity space, for the US business segment. This Architect works with other architects, engineers, technical SMEs, and operational support staff both within IT and other business units to provide and maintain solutions that meet business and technical requirements.

The Architect will assist in the development of technology roadmaps and documentation; act as the subject matter expert in a variety of domains such as Identity and Access Management (IAM), SIEM integration, IR automation, etc. The Architect will maintain a solid understanding of the entire Information Security landscape. This role is a unique opportunity to join a team and company whose work will have direct impact on company direction, our customers, and our industry.

Position Responsibilities:

Contribute to the development and evolution of cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities.

Design and guide security architectures across areas such as IAM, SIEM and security operations, cloud security, application security, and incident-response automation.

Design enterprise solutions that incorporate appropriate security controls and risk-mitigation strategies across modern and legacy technology environments.

Lead and contribute to conceptual, solution, and component-level security architectures and develop reusable reference architectures and implementation patterns.

Review solution architectures, provide security guidance, and help architects and engineering teams align solutions with established security standards and architecture principles.

Evaluate third-party technologies, platforms, suppliers, and emerging security capabilities, providing recommendations based on security, architecture, and business requirements.

Partner with architects, engineers, security teams, technology operations, and business stakeholders to design secure, resilient, and supportable solutions.

Assess relevant vulnerabilities, security alerts, and threat intelligence and translate emerging threats into architecture guidance and appropriate risk-mitigation strategies.

Support security investigations and incident-response activities by providing architecture and technical expertise where needed.

Maintain awareness of evolving cybersecurity technologies, industry practices, and threat trends and incorporate relevant developments into security strategy and architecture.

Build collaborative relationships with internal and external technology stakeholders and clearly communicate security requirements, architectural decisions, risks, and trade-offs.

Provide hands-on technical guidance and support for security solutions and architecture validation, including participation in after-hours response to significant security incidents when required.

Required Qualifications:

Extensive relevant experience in cybersecurity, security engineering, or security architecture, typically gained through 7+ years of professional experience or equivalent demonstrated expertise.

Strong knowledge of core application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation, and security logging.

Experience designing or supporting enterprise security solutions across areas such as IAM, SIEM/security operations, cloud security, application security, or infrastructure security.

Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.

Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.

Working knowledge of security considerations across common enterprise operating systems, including Windows, macOS, and Linux environments.

Strong understanding of network protocols, network security concepts, and common enterprise security architecture patterns.

Experience with SaaS, IaaS, and PaaS environments and cloud security practices using platforms such as Microsoft Azure, AWS, GCP, or comparable cloud technologies.

Knowledge of recognized cybersecurity frameworks and practices, such as NIST.Hands-on technical capability with scripting, operating-system tooling, troubleshooting, and security configuration sufficient to support architecture validation and complex solution design.

Understanding of modern software development…