RQ- Technology Architect - Senior

About the job RQ09515 - Technology Architect - Senior

The Senior Technology Architect role requires deep knowledge, expertise, and experience in cyber security solutions, security operations (Sec Ops) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next‑generation network security. The resource also requires hands‑on experience in analyzing, configuring, implementing, and troubleshooting cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K12 school board environment.

• Providing subject‑matter expertise, tactical, operational advice, consultancy, and training on all aspects of cyber security and network solutions such as:
• Cyber security solutions to protect, detect, and respond to cyber threats.
• Zero‑trust architecture (ZTA) solutions.
• Cloud security solutions.
• Use of MITRE ATT&CK, D3
  
  FEND and ATLAS frameworks in security operations.
• Various vendor‑specific cyber security and network solutions.
• Security operations (Sec Ops) and AI‑operations (AIOps) practices.
• Delivering solution and architecture guidance, training, and implementation support for next‑generation networks, network protection and cyber security technologies, including:
• Security service edge (SSE)/secure access service edge (SASE), including integration of network and security functions such as secure web gateway (SWG), cloud access security broker (CASB) and zero‑trust network architecture, firewall‑as‑a‑service (FWaaS).
• SD‑WAN (software‑defined wide area network) and software‑defined networking (SDN).
• AI and machine learning (ML)‑driven network and security technologies.
• Endpoint protection platforms (EPP), endpoint detection and response (EDR), and extended detection and response (XDR) solutions.
• Advanced intrusion prevention systems (IPS), intrusion detection systems (IDS), network access control and distributed denial‑of‑service (DDoS) protection.
• Identity security and authentication solutions (passwordless, password‑based, certificate‑based, MFA).
• Incident response and incident management (IR & IM) solutions.
• Automated vulnerability and patching.
• User and entity behaviour analytics (UEBA).
• Penetration testing and automated red teaming.
• Operation technology (OT) security.
• Providing technical guidance, delivering solution, training, and implementation support for strategic integration of hybrid cyber security operating models involving both in‑house and outsourced MSSP (managed security services provider) capabilities
  , including:
• Oversight of MSSP integration and optimisation.
• Security operations architecture planning.
• Threat detection and incident response.
• Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), EDR/XDR, and threat intelligence platforms in a hybrid implementation.
• Automation and orchestration workflows.
• Governance, risk, and compliance in a hybrid (in‑house and outsourced) security operations environment.
• Providing subject‑matter expertise in network operations centre (NOC) and security operations centre (SOC) technologies, services, and tools, including, but not limited to:
• Security Information and Event Management (SIEM).
• Security Orchestration, Automation and Response (SOAR).
• Strategic use of telemetry and analytics tools to support architectural decisions.
• Designing and implementing end‑to‑end security automation workflows using SOAR platforms (e.g., Microsoft Sentinel, Cortex XSOAR), including bi‑directional integrations, telemetry ingestion, and orchestration of real‑time response actions.
• Providing expertise on integrating advanced AI in cyber security, including agentic AI and autonomous security
  , to support automation maturity and organisational readiness.
• Deploying agentic AI‑based automation for incident response, phishing mitigation, access control, and exposure management across distributed environments.
• Developing observability dashboards and managing security metrics (KPIs/KRIs) to measure automation effectiveness, operational maturity, and MSSP accountability.
• Executing and maintaining continuous automated…