Cyber Security Domain Architect

Team: IT

Location: Canada

Commitment: Contract

Workplace Type: remote

Accountabilities

• Design, evaluate, and maintain enterprise security architectures covering cloud, infrastructure, identity, networking, and data environments.

• Develop current-state and target-state security architectures, ensuring alignment with enterprise security principles, business objectives, and regulatory requirements.

• Define and maintain security standards, controls, reference architectures, and multi-year Security Domain roadmaps.

• Provide technical leadership across Azure and VMware Cloud Foundation (VCF) environments, including cloud security, VMware security, identity, and infrastructure protection.

• Design and strengthen security capabilities covering Microsoft Entra ID/IAM, Zero Trust, defense-in-depth, network segmentation, micro-segmentation, data protection, and encryption.

• Guide the implementation and governance of Microsoft security technologies, including Microsoft Defender for Cloud, Endpoint, and Identity.

• Facilitate security roadmap workshops with technical and business stakeholders, build alignment, and secure approval for proposed architectural directions.

• Support the implementation of approved security roadmaps and track business, risk, compliance, and operational outcomes.

• Conduct security architecture reviews, gap assessments, risk analyses, and evaluations of existing and proposed technology solutions.

• Develop Architecture Decision Records (ADRs) and Architecture Review Board (ARB) documentation to support transparent and consistent architectural decisions.

• Evaluate emerging cybersecurity technologies and recommend appropriate solutions, architectural alternatives, and mitigation strategies.

• Advise senior and executive stakeholders on security risks, priorities, architectural trade-offs, and remediation approaches.

• Contribute to threat detection, incident response, and broader security resilience initiatives where architectural guidance is required.

Requirements

• Minimum 3 years of professional experience as a Security Architect or in a closely related cybersecurity architecture role.

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related discipline.

• Strong expertise in cybersecurity, enterprise security architecture, and security solution design.

• Proven experience designing and implementing Azure Security Architecture and Azure-native security controls and cloud governance.

• Strong knowledge of Microsoft Entra ID and Identity & Access Management (IAM).

• Experience with VMware Cloud Foundation (VCF) and VMware security architecture.

• Solid understanding of network segmentation, micro-segmentation, Zero Trust, and defense-in-depth security models.

• Hands-on knowledge of Microsoft Defender for Cloud, Defender for Endpoint, and Defender for Identity.

• Strong understanding of security governance, risk and compliance, data protection, encryption, threat detection, and incident response.

• Experience developing security strategies, standards, controls, reference architectures, and multi-year security roadmaps.

• Ability to perform current-state and target-state architecture assessments, gap analyses, and security architecture reviews.

• Experience preparing Architecture Decision Records (ADRs) and supporting Architecture Review Boards (ARBs).

• Strong ability to communicate complex cybersecurity concepts and provide trusted advice to senior and executive stakeholders.

• Experience working with healthcare or public-sector security and compliance frameworks is highly valuable.

• Ability to balance security requirements with business needs, operational realities, technical constraints, and risk considerations.

• Strong analytical, strategic-thinking, stakeholder management, communication, and problem-solving skills.

• Relevant professional certification such as CISSP, CISM, Azure Security Engineer Associate, or Azure Solutions Architect Expert is required or strongly preferred.

Benefits

• Fully remote working environment, providing flexibility in where you work.

• Opportunity to influence enterprise-wide cybersecurity strategy and architecture.

• Broad technical exposure across Azure, VMware Cloud Foundation, identity, cloud security, infrastructure, and data protection.

• Opportunity to work on complex security transformation initiatives involving Zero Trust, segmentation, threat detection, and modern cloud security.

• High level of ownership and visibility when advising senior and executive stakeholders.

• Exposure to strategic security roadmaps, architecture governance, emerging technologies, and enterprise risk management.

• Opportunity to contribute to security initiatives with significant business, operational, and compliance impact.

• Supportive environment for continued professional development and cybersecurity certification growth.

• Potential to work across complex, highly regulated environments where security architecture plays a critical role.