Solution Architect -Security & API Infrastructure

• Apigee API Management
• Design enterprise API strategies using Apigee including:
  • API Proxy Design
  • Shared Flows
  • Target Servers
  • Developer Portals
  • Analytics
  • OAuth/OIDC
  • Rate Limiting
  • API Monetization

Job Title

Solution Architect (Security & API Infrastructure)

Location

Toronto, Ontario (Hybrid – 4 Days Work From Office)

Duration

6–12 Months

Required Experience

8+ Years (5+ Years in Security Architecture)

• Solution Architecture
• Security Architecture
• API Infrastructure
• Apigee API Management
• AWS Cloud Architecture
• Akamai
• Cloudflare
• Enterprise Security
• Financial Services

• Lead end-to-end solution architecture across security, API, and cloud domains.
• Gather requirements and define solution architecture from design through implementation and operational handover.
• Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.).
• Produce architecture artifacts including:
  • High-Level Design (HLD)
  • Low-Level Design (LLD)
  • Data Flow Diagrams
  • Sequence Diagrams
  • Threat Models
• Evaluate emerging technologies through Proof of Concepts (POCs) and vendor assessments.

• Design enterprise security architectures covering:
  • Encryption at Rest
  • Encryption in Transit
  • Encryption in Use
  • Key Management
  • Certificate Lifecycle Management
  • Public Key Infrastructure (PKI)
• Architect fraud detection and digital identity verification solutions using Threat Metrix or equivalent platforms.
• Define security policies for:
  • API Gateways
  • Web Application Firewalls (WAF)
  • DDoS Protection
  • Bot Management
• Conduct:
  • Threat Modeling
  • Security Reviews
  • Risk Assessments
• Ensure compliance with financial industry standards including:
  • PCI-DSS
  • SOX
  • GDPR
  • Open Banking

• Design enterprise API strategies using Apigee including:
  • API Proxy Design
  • Shared Flows
  • Target Servers
  • Developer Portals
  • Analytics
  • OAuth/OIDC
  • Rate Limiting
  • API Monetization
• Architect edge security solutions using:
  • Akamai
  • Cloudflare
• Configure:
  • WAF Rules
  • Bot Manager
  • DDoS Protection
  • Edge Compute
  • DNS Management
• Design enterprise DNS architecture including:
  • DNSSEC
  • Traffic Management
  • Failover
  • Multi-CDN Strategies
  • GSLB
  • TTL Strategies

• Design secure AWS cloud solutions utilizing:
  • VPC
  • IAM
  • KMS
  • Cloud Front
  • Route 53
  • Guard Duty
  • Security Hub
  • AWS WAF
  • AWS Shield
  • Lambda
  • ECS/EKS
  • API Gateway
• Implement cloud-native security principles:
  • Zero Trust Networking
  • Least Privilege IAM
  • Secrets Management
  • Infrastructure-as-Code Security
• Design hybrid and multi-cloud connectivity architectures.

• Participate in Architecture Review Boards (ARBs) and Design Authority forums.
• Define enterprise architecture standards and governance.
• Mentor development teams on architecture and security best practices.
• Collaborate with:
  • Enterprise Architects
  • Engineering Teams
  • Product Owners
  • Third-party Vendors
• Maintain architecture documentation and enterprise architecture repositories.

• 8+ years in Solution or Technical Architecture.
• 5+ years focused on Security Architecture.
• Hands-on experience with:
  • Apigee API Management
  • API Proxy Development
  • Shared Flows
  • Target Servers
  • Analytics
• Strong expertise with:
  • Akamai (Property Manager, WAF/KSD, Bot Manager, Edge DNS)
  • Cloudflare (WAF, Workers, DNS)
• Deep understanding of:
  • TLS 1.2 / TLS 1.3
  • AES-256
  • RSA
  • Elliptic Curve Cryptography
  • HSM
  • Tokenization
• Enterprise DNS architecture experience.
• Practical experience with Threat Metrix or similar fraud prevention platforms.
• Strong AWS architecture experience (AWS Solutions Architect Professional preferred).

• Financial Services experience is mandatory:
  • Banking
  • Payments
  • Insurance
  • Capital Markets
• Experience with:
  • Architecture Governance
  • Technical Debt Management
  • Architecture Review Boards (ARBs)
  • Enterprise Standards
• Knowledge of compliance frameworks:
  • PCI-DSS
  • SOX
  • FCA
  • PSD2
  • Open Banking

• Experience across the complete solution lifecycle:
  • Discovery
  • Design
  • Build
  • Test
  • Deploy
  • Operate
• Familiarity with architecture frameworks:
  • TOGAF
  • C4 Model
  • arc
    42
• Experience using:
  • Lucidchart
  • Draw.io
• Strong understanding of:
  • Dev Sec Ops
  • CI/CD Pipelines
  • Terraform
  • AWS Cloud Formation
• Experience with:
  • Microservices
  • Event-Driven Architecture
  • REST APIs
  • GraphQL
  • Messaging & Streaming

• Microsoft Azure
• Google Cloud Platform (GCP)
• Okta
• Ping Identity
• Splunk
• Microsoft Sentinel
• SIEM/SOAR Platforms
• Container Security

• Excellent stakeholder communication.
• Ability to present complex technical concepts to executive and non-technical audiences.
• Strong analytical and problem-solving skills.
• Ability to work in fast-paced, highly regulated environments.
• Collaborative leadership with experience influencing cross-functional teams.

• Solution Architect
• Security Architect
• Enterprise Architecture
• API Infrastructure
• Apigee
• API Gateway
• OAuth
• OpenID Connect (OIDC)
• AWS
• Cloud Architecture
• Akamai
• Cloudflare
• WAF
• DDoS Protection
• Bot Management
• Threat Metrix
• PKI
• TLS 1.3
• AES-256
• RSA
• HSM
• Tokenization
• DNS
• DNSSEC
• Route 53
• Cloud Front
• IAM
• KMS
• Guard Duty
• Security Hub
• Zero Trust
• Dev Sec Ops
• Terraform
• Cloud…