Senior Technology Architect

Job Description

<p><strong>Candidates MUST be authorized to work in Canada / hold a valid work visa. CCI does not sponsor work visas.</strong></p><p><br></p><p>We are looking for a <strong>Senior Security Architect</strong> to join our Security Architecture Practice and lead end-to-end security design for modern cloud and enterprise environments.</p><p>This role offers the opportunity to engage with senior stakeholders, shape enterprise-wide security standards, and deliver robust architecture solutions across cloud, SaaS, and hybrid platforms.</p><p><br></p><p><strong> Role Overview</strong></p><p>As a Senior Security Architect, you will collaborate with application, product, and operations teams to embed security from start to finish. You'll lead security assessments, threat modelling, architectural design, and develop reusable security patterns that align with internal standards and global best practices.</p><p><br></p><p><strong> Key Responsibilities</strong></p><p><strong>Security Architecture & Design</strong></p><ul><li>Define security requirements and translate them into scalable architecture solutions.</li><li>Lead threat modeling, risk assessments, and architecture reviews during design and implementation phases.</li><li>Develop reusable "secure-by-design" patterns for cloud (IaaS/PaaS), SaaS, and hybrid environments.</li><li>Architect identity solutions: SSO, MFA, PKI, federated identity, least privilege access models.</li><li>Design secure network and infrastructure controls: segmentation, NSGs, firewalls, SASE, micro-segmentation.</li><li>Define data protection mechanisms: KMS/Vault, TDE, DLP, tokenization, dataset encryption.</li></ul><p><br></p><p><strong>Security Operations Integration</strong></p><ul><li>Integrate logs, events, and telemetry into SIEM platforms such as <strong>Splunk Cloud and Azure Sentinel</strong>.</li><li>Support SOAR automation and EDR workflows (Defender, Cortex XDR).</li><li>Partner with ServiceNow teams for security design, use-case workflows, and CSOC monitoring enablement.</li></ul><p><strong>DevSecOps & Engineering</strong></p><ul><li>Embed automated security controls into CI/CD pipelines and Infrastructure-as-Code workflows.</li><li>Provide implementation guidance, architecture diagrams, data-flow models, and design artifacts.</li></ul><p><strong>Governance & Leadership</strong></p><ul><li>Lead architecture review boards, design workshops, and security governance gates.</li><li>Mentor junior architects and engineers to uplift security architecture capability.</li></ul><p><br></p><p><strong> Must-Have Requirements</strong></p><ul><li><strong>7+ years</strong> Security and Enterprise Architecture experience</li><li>Strong expertise with <strong>SIEM (Splunk Cloud and Azure Sentinel)</strong></li><li>Experience with <strong>ServiceNow integrations for CSOC monitoring and threat use cases</strong></li><li>Proven stakeholder and client-facing leadership experience</li><li>Experience implementing enterprise security programs (DLP, insider risk, compliance models)</li></ul><p><br></p><p><strong> Required Experience & Expertise</strong></p><p><strong>Core Security Domains (45%)</strong></p><ul><li>IAM: SSO, MFA, PKI, SAML, OAuth/OIDC, RBAC/ABAC</li><li>Infrastructure Security: AWS/Azure/GCP security controls, VPC/VNet segmentation, SASE</li><li>Data Protection: TDE, tokenization, KMS/Vault, DLP, DAM</li><li>Application Security: Secure SDLC, threat modeling (STRIDE/DREAD), serverless/container security</li><li>Security Operations: SIEM (Splunk Cloud & Azure Sentinel), SOAR, EDR tools</li></ul><p><br></p><p><strong>Agile Delivery (15%)</strong></p><ul><li>Experienced with Scrum: backlog, user stories, sprints, cross-team alignment</li><li>Integrating security requirements into CI/CD</li></ul><p><br></p><p><strong>Architecture & Design (35%)</strong></p><ul><li>Apply frameworks: TOGAF, NIST CSF, CIS Controls</li><li>Develop solution designs: conceptual/logical/physical diagrams, sequence flows</li><li>Support IaC templates and deployment guidance</li><li>Lead architecture governance and design authority processes</li></ul><p><br></p><p><strong>Regulatory & Public Sector Awareness (5%)</strong></p><ul><li>Experience with standards: PCI DSS, ISO 27001, PHIPA, FIPPA, AODA (asset)</li></ul><p></p>