ServiceNow – Architect Job Oshawa area,Ontario Canada,IT/Tech

Position: OPEN: ServiceNow – Architect

Job Overview

The Service Now Architect is responsible for the architecture, design, implementation, and continuous improvement of Service Now capabilities focused on Security Incident Response (SIR), Vulnerability Response (VR), and Integrated Risk Management (IRM).

This role will provide technical and functional leadership to ensure scalable, secure, and sustainable solutions that align with enterprise governance, cybersecurity, risk, and compliance requirements.

The successful candidate will work closely with Cybersecurity, Risk, Compliance, IT Operations, and delivery teams to define target-state architecture, guide implementations, and drive platform best practices across the Service Now ecosystem.

Lead the end-to-end architecture, solution design, and implementation of Service Now SIR, VR, and IRM modules.

Define scalable and supportable architecture patterns, data models, workflows, integrations, and governance controls for security and risk use cases.

Collaborate with business stakeholders, cybersecurity teams, risk teams, compliance teams, and technical teams to translate requirements into solution designs.

Provide architectural guidance for incident response workflows, vulnerability lifecycle processes, risk management frameworks, issue remediation, exceptions management, and policy/compliance processes.

Establish and maintain platform design standards, guardrails, and best practices to ensure consistency, performance, scalability, and maintainability.

Design and oversee integrations between Service Now and upstream/downstream tools such as security tools, vulnerability scanners, SIEM/SOAR platforms, CMDB, asset systems, and enterprise applications.

Support roadmap planning and recommend improvements to mature security and risk processes enabled through Service Now.

Ensure solutions align with enterprise architecture, data governance, security, audit, and operational support requirements.

Provide technical leadership during implementation projects, enhancements, upgrades, and operational sustainment activities.

Review and approve detailed solution designs, technical configurations, integration patterns, and data flows delivered by developers or implementation partners.

Support testing strategy, deployment planning, release governance, and transition to operations.

Drive continuous improvement by identifying opportunities to improve automation, reporting, user experience, process efficiency, and control effectiveness.

Architecture & Solution Design

Develop target-state and transition-state architecture for Service Now SIR, VR, and IRM capabilities.

Create solution designs for workflows, data models, forms, portals, dashboards, notifications, business rules, integrations, and role-based access.

Define patterns for risk registers, issues, controls, policy exceptions, remediation tracking, and vulnerability response orchestration.

Ensure appropriate use of CMDB, CI relationships, asset data, and service context to support security and risk use cases.

Process Design & Implementation

Design and optimize processes for:

Security incident intake, triage, investigation, containment, and remediation

Vulnerability identification, prioritization, assignment, remediation, and exception management

Risk identification,

Qualifications

Service Now Platform & Architecture

Minimum of 3 years of hands on experiences with SIR/VR/IRM , guiding and reviewing vendor implementations

Strong understanding of Service Now platform architecture, data model, and application framework

Experience designing scalable solutions across SIR (Security Incident Response), VR (Vulnerability Response), and IRM

Ability to define end-to-end solution architecture (workflows, forms, integrations, reporting)

Security & Risk Domain Knowledge – Deep understanding of:

Security incident lifecycle (triage containment resolution)

Vulnerability management lifecycle (identify prioritize remediate exception handling)

Risk management concepts (risk register, controls, issues, policy/compliance)

Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) is a strong asset

Process Design & Implementation – Experience designing and optimizing:

Incident response workflows

V…