RQ08907 - Sr. Technology Architect

RQ08907 - Sr. Technology Architect

Downtown, Toronto

Hybrid - office 3 days a week

Contract 7+ months

Security Level: CRJMC (must get clearance before start date)

Key Responsibilities

• Lead end-to-end security design and architecture reviews for common cloud platforms (AWS, Azure, GCP) and major SaaS applications
• Develop and maintain secure-by-design reference architectures, patterns, and guidelines tailored to IaaS, PaaS, and SaaS deployments
• Perform threat modeling, risk assessments, and gap analyses to align solutions with internal security standards and regulatory requirements
• Define identity and access control strategies, including SSO, MFA, PKI, and least-privilege models
• Design various network and infrastructure security controls: e.g. network segmentation, security groups, firewalls, SASE, IPS/IDS
• Architect data protection solutions: encryption key management, Transparent Data Encryption, tokenization, DLP for cloud and SaaS data
• Integrate application and infrastructure logs into SIEM platforms (Splunk Cloud, Azure Sentinel) and design SOAR playbooks for automated response
• Collaborate with DevOps and engineering teams to embed security requirements in CI/CD pipelines, leveraging IaC tools
• Facilitate design workshops, governance gates, and architecture review boards; document decisions and action items
• Mentor junior architects and security engineers, sharing best practices and driving continuous improvement

Must-haves:

• Proven leadership in technical security architecture for enterprise environments
• Security Architecture and design with Cloud Platforms (AWS, Azure)
• Experience with SaaS ecosystems
• Strong grounding in application architecture, networking, and security operations
• Client Relationship Building skills.

Nice-to-Have:

• Public sector experience
• AODA