Find work in Canada.

334,431 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 46 mins ago
Junior Research Coordinator
The University of British Columbia
Vancouver, BC
$5,538.94 to $6,497.44 CAD / month
Full-time
The Hematology Research Program (HRP) conducts phase I, II and III clinical trials, registries and other clinical research in patients with a variety of benign and malignant hematologic…
Added 46 mins ago
SAU Data Scientist
The University of British Columbia
Vancouver, BC
$6,631.67 to $9,533.25 CAD / month
Full-time
The Data Scientist is a member of the core Sea Around Us team. This position reports directly to the Research Unit Manager, Dr Maria L.D. Palomares, and as required to the Principal…
Added 1 hour ago
SAU Data Scientist
University of British Columbia
Vancouver, BC · UBCV | AERL (Aquatic Ecosystems Research Laboratory) (AERL)
$6,631.67 to $9,533.25 CAD / month
Full-time
The Data Scientist is a member of the core Sea Around Us team. This position reports directly to the Research Unit Manager, Dr Maria L.D. Palomares, and as required to the Principal…
Added 2 hours ago
Cloud Security Architect
Affinity
Vancouver, BC
Contract
…advisory expertise in support of a cloud security improvement…
Added 3 hours ago
Logistics Coordinator/Coordonnateur ou coordonnatrice de la logistique (Calgary)
Konica Minolta Business Solutions Canada
Calgary, AB
Full-time
Support the True-Blue Program with communications and reporting.
Added 4 hours ago
Gestionnaire de performance , Sherbrooke (Estrie)/Drummondville (Centre-du-Québec)
AutoTrader.ca
Drummondville, QC · Sherbrooke, QC
…opérations, leur marketing et leurs ventes. Dealertrack Canada est le principal portail de financement automobile au pays, traitant plus de 6,5 millions de demandes de crédit chaque année.…
Added 4 hours ago
Junior Research Coordinator
University of British Columbia
Vancouver, BC · VCH | Vancouver General Hospital - Gordon and Leslie Diamond Health Care Centre (VGHHCC)
$5,538.94 to $6,497.44 CAD / month
Full-time
The Hematology Research Program (HRP) conducts phase I, II and III clinical trials, registries and other clinical research in patients with a variety of benign and malignant hematologic…
Added 4 hours ago
MRI Technologist
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
Full-time
Department / Research Program: Courtois Cardiovascular Magnetic Resonance Research Group
Added 4 hours ago
MRI Technologist
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
Full-time
Department / Research Program: Courtois Cardiovascular Magnetic Resonance Research Group
Added 4 hours ago
Senior Counsel, Specialized Finance
TD
Toronto, ON · Montreal, QC
Full-time
Senior specialist role with principal accountability in the areas of strategic and tactical advice, counsel, influence, relationships and oversight, development of others, and special…
Added 4 hours ago
Senior Counsel, Specialized Finance
TD
Toronto, ON
Full-time
Senior specialist role with principal accountability in the areas of strategic and tactical advice, counsel, influence, relationships and oversight, development of others, and special…
Added 4 hours ago
Engineering IP Program Manager, Sr. Principal
Marvell Technology
Toronto, ON · Greater Toronto Area, Canada
Full-time
The IP program Manager will be part of Central Engineering’s program management team responsible for the IP development and delivery for Marvell’s products and custom silicon businesses,…
Added 4 hours ago
Manager, Technology and Venture Development
TIAP - Toronto Innovation Acceleration Partners
Toronto, ON
Full-time
We are seeking a high-performing, analytically, entrepreneurial and commercially minded individual. The Manager, Technology & Venture Development role is ideal for someone who can…
Added 5 hours ago
Acheteur NPI / NPI Buyer
RTX
Longueuil, QC
Full-time
Agir en tant que principal point de contact avec le fournisseur et coordonner les exigences du programme avec eux, par exemple : communiquer les spécifications du projet, les échéanciers et…
Added 5 hours ago
Logistics Coordinator/Coordonnateur ou coordonnatrice de la logistique (Calgary)
Konica Minolta Business Solutions, U.S.A., Inc.
Calgary, AB
Full-time
Support the True-Blue Program with communications and reporting.
Added 6 hours ago
Principal Department Manager, Department Manager, Civil and structural engineering for hydropower
BBA Consultants
Mont-Saint-Hilaire, QC · Mont-St-Hilaire, QC
Full-time
…responsible for departmental talent development, performance, technical excellence and sustainable growth. You’ll work closely with project teams in various disciplines and BBA leadership…
Added 6 hours ago
Principal Department Manager, Department Manager, Civil and structural engineering for hydropower
BBA Consultants
Montreal, QC
Full-time
…responsible for departmental talent development, performance, technical excellence and sustainable growth. You’ll work closely with project teams in various disciplines and BBA leadership…
Added 7 hours ago
Project Manager, Capture and Optimization of Research Data (CORD) Platform
RI-MUHC | Research Institute of the MUHC | #rimuhc
Montreal, QC
Full-time
The Research Institute of the MUHC is seeking an interim Project Manager to join the Capture and Optimization of Research Data (CORD) platform of the Centre for Outcomes Research and…
Added 9 hours ago
Senior HR Data Governance Lead (Hybrid)
Morgan Stanley
Montreal, QC
Full-time
We’re seeking an experienced people manager to join our team as a Senior Data Governance Lead, to lead the global function that sets the standards, ownership model, and controls that ensure…
Added 9 hours ago
Senior HR Data Governance Lead (Hybrid)
Morgan Stanley
Montreal, QC
Full-time
We’re seeking an experienced people manager to join our team as a Senior Data Governance Lead, to lead the global function that sets the standards, ownership model, and controls that ensure…
Added 9 hours ago
2627-188 - Student Accessibility Specialist (PS4) - Burridge Campus
Jobbe
Yarmouth Indian Reserve No. 33, NS · Yarmouth, NS
Temporary
Reporting to the Manager, Student Supports, and under the functional guidance of the Manager, Student Accessibility Services, you are accountable for leading accommodation planning and…
Added 12 hours ago
Gestionnaire De Projet / Project Manager
Actalent
Mirabel, QC
Contract
You will be part of the Project Manager Business Partner Team in System & Energy, working on principal projects including landing gear, engine, fuel supply, and electrical systems. You will…
Added 14 hours ago
Principal Infrastructure Project Manager and Engineer
Ressources humaines - Port Québec
Quebec, QC
Reporting to the Director, Infrastructure Project Management, the incumbent acts as a Senior Project Manager and is responsible for the planning, design, and execution of major, complex, or…
Added 17 hours ago
IT Manager / Gestionnaire TI
Vention
Montreal, QC
Full-time
4-8 years in IT consulting, project management, or deployment of technical solutions and 1-2 years of experience as a team leader preferred
Added 17 hours ago
Principal Product Manager - Technical AI Solutions
Royal Bank of Canada
Toronto, ON
Full-time
We are seeking a seasoned Principal Product Manager (individual contributor) to lead RBC's AI-powered conversational banking experience. In this role, you will be responsible for leading…

Affinity

Cloud Security Architect

Vancouver, BC, Canada

Job type: Contract
Apply by: Oct 25, 2026
Experience: Minimum 10 years of progressive experience in information security, cybersecurity architecture or enterprise security architecture.
Posting language: English
Posted: Sep 25, 2026

Apply About employer

Applications open in a new tab.

Original job description

Job Description

On behalf of our public-sector client, Affinity is seeking a Cloud Security Architect to provide senior cloud security architecture, governance and advisory expertise in support of a cloud security improvement program.

The consultant will define and maintain target-state cloud security architecture and roadmap; design secure identity, network, logging, data protection and resilience patterns; develop cloud security standards and governance; guide security control implementation; translate architecture into actionable work; resolve technical blockers; facilitate architecture reviews and technical decisions; and define security metrics, control validation and assurance evidence.

Architecture and Roadmap

Define and maintain the target-state cloud security architecture and sequenced roadmap.
Assess and document current-state Azure Landing Zone security architecture, including management groups, identity, network, data flows, logging, security tooling and resilience dependencies.
Design secure and reusable architecture patterns for identity, privileged access, network segmentation, secure ingress and egress, logging, data protection, workload placement, resilience and cloud-native services.
Produce clear architecture diagrams, transition states, technical standards, architecture decision records and implementation guidance.
Identify technical debt, interdependencies, assumptions and decision points that affect delivery sequencing and risk reduction.

Standards and Governance

Develop and publish cloud security standards, workload placement rules, secure configuration requirements and assurance criteria.
Define risk-based exception processes, approval criteria, expiry requirements and compensating-control expectations.
Establish practical architecture review and technical decision practices that can be sustained after the engagement.
Align technical standards with privacy, information security, enterprise architecture and operational requirements.

Security Control Design and Implementation Guidance

Lead Azure Policy catalog rationalization, initiative design, scope, enforcement approach, exemptions and remediation design.
Guide the design and adoption of Microsoft Defender for Cloud, Microsoft Sentinel, Azure Monitor, Log Analytics, diagnostic settings, monitoring automation and cloud security dashboards.
Define privileged-access, RBAC, PIM, workload identity, service principal, secrets, certificate and key-management patterns.
Define secure network architecture, including segmentation, security zones, east-west visibility, approved ingress, forced egress, public exposure controls and network telemetry.
Define secure DevOps and infrastructure-as-code guardrails, including policy-as-code, pipeline security, configuration-drift detection, approval and rollback requirements.
Guide backup, recovery, ransomware resilience and control-validation architecture.

Delivery Leadership and Technical Decision-Making

Translate architecture into actionable work packages, technical dependencies, acceptance criteria and implementation sequencing.
Facilitate technical working groups, architecture reviews and security decision sessions.
Provide clear, evidence-based recommendations, options and trade-offs to technical and governance stakeholders.
Resolve or escalate technical blockers that cross organizational or technology boundaries.
Support implementation planning while maintaining clear separation between architecture accountability and operational execution.

Independent Analysis and Knowledge Discovery

Quickly assess unfamiliar environments with limited onboarding and minimal day-to-day direction.
Gather and reconcile information from documents, configuration evidence, interviews, workshops and subject matter experts.
Operate effectively where documentation maturity varies and key processes or design decisions are held as tribal or tacit knowledge.
Elicit undocumented assumptions, dependencies, ownership boundaries and operating practices from subject matter experts.
Validate conflicting information and clearly document confirmed facts, assumptions, gaps and items requiring technical verification.
Convert tacit knowledge into reusable architecture artifacts, standards, decision records, process guidance and operational documentation.

Assurance, Reporting and Knowledge Transfer

Define cloud security metrics, control-validation methods, implementation evidence and technical acceptance criteria.
Coordinate technical assessments, control testing, attack-path review and remediation verification as required.
Maintain traceability between identified risks, architecture decisions, implemented controls, evidence and residual risk.
Communicate technical risk and recommendations clearly to both technical and executive audiences.
Transfer knowledge to internal teams through documentation, walkthroughs, coaching and structured handover.
Leave sustainable architecture and governance practices that reduce long-term dependency on external consulting support.

Mandatory Experience Requirements

Minimum 10 years of progressive experience in information security, cybersecurity architecture or enterprise security architecture.
Minimum five years of hands-on experience designing, assessing or securing Microsoft Azure environments, including Azure Landing Zones.
Minimum three years of experience performing a Cloud Security Architect, Cybersecurity Architect, Security Consulting Architect or equivalent senior design role.
Minimum three years of experience delivering security architecture or cloud security outcomes within formal projects or programs, including work planning, dependencies, risks, milestones, technical decisions, acceptance criteria and stakeholder reporting.
Demonstrated experience defining target-state architecture, transition roadmaps, cloud standards, technical guardrails and governance practices.
Demonstrated experience translating security assessments and risk findings into implementable architecture, prioritized remediation and measurable outcomes.
Demonstrated experience producing executive-ready recommendations and detailed technical artifacts for implementation teams.
Demonstrated experience influencing technical decisions across matrixed teams without direct authority.
Demonstrated experience operating in environments with incomplete or evolving documentation and extracting tribal or tacit knowledge from subject matter experts.
Demonstrated experience planning and completing structured knowledge transfer and handover at the conclusion of a consulting engagement.

Healthcare And Regulated-Environment Experience

Minimum two years of experience delivering cybersecurity, cloud, architecture or technology-risk work in healthcare, preferably within a Canadian health authority, public healthcare organization or similarly complex health system.
Demonstrated understanding of the security, privacy, availability, clinical-safety and operational-resilience considerations associated with health information and healthcare services.
Experience collaborating with privacy, risk, security operations, infrastructure, clinical application, governance and business stakeholders in a regulated environment.
Experience working within public-sector procurement, governance and project-delivery constraints is preferred.

Certification Requirements

Candidates that following certification, or demonstrate an equivalent current credential and directly comparable expertise will be preferred:

Microsoft Certified: Cybersecurity Architect Expert, including Exam SC-100, or an equivalent current Microsoft cybersecurity architecture credential.

One or more of the following current certifications is strongly preferred:

Microsoft Certified: Cloud and AI Security Engineer Associate.
Certified Information Systems Security Professional (CISSP).
Certified Cloud Security Professional (CCSP).
Certified Information Security Manager (CISM).
The Open Group Architecture Framework (TOGAF) certification or another recognized enterprise architecture credential.
A current project-delivery credential such as Project Management Professional (PMP), PRINCE2 Practitioner or an Agile delivery certification.

Relevant certifications must be current at the time of submission. Equivalent credentials may be considered where the candidate demonstrates directly comparable Azure security architecture, cloud governance and consulting capability.

Required Technical Skills

Microsoft Azure Landing Zones, management groups, subscriptions and resource organization.
Azure Policy, policy initiatives, exemptions, remediation, secure configuration baselines and configuration-drift controls.
Azure RBAC, Privileged Identity Management, Conditional Access, managed identities, service principals, Azure Key Vault and privileged-access architecture.
Azure networking, hub-and-spoke or virtual hub patterns, network security groups, segmentation, private connectivity, secure ingress and egress, DNS and firewall integration.
Microsoft Defender for Cloud, Microsoft Sentinel, Azure Monitor, Log Analytics, diagnostic settings, security telemetry and detection architecture.
Data classification, workload placement, encryption, key management, sensitive-data protection and privacy-by-design principles.
Secure DevOps, Azure DevOps, infrastructure-as-code, policy-as-code, pipeline security and automated guardrails.
Backup, recovery, ransomware resilience, availability architecture and recovery validation.
Cloud threat modeling, security architecture risk analysis, control assurance and residual-risk assessment.

Affinity Earn

Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/

About Affinity

Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 13985

Apply About employer

More about this job

Responsibilities

Define and maintain the target-state Azure security architecture, roadmap, standards, governance, and reusable security patterns, while guiding implementation of controls across identity, networking, monitoring, data protection, DevOps, and resilience. Lead architecture reviews and technical decisions, translate risks into sequenced work and measurable assurance, and transfer sustainable practices and knowledge to internal teams.

Requirements

Requires at least 10 years of information security or security architecture experience, including five years securing Microsoft Azure environments and three years in a senior architecture role and formal project or program delivery. Candidates should also have healthcare or regulated-environment experience, strong stakeholder and knowledge-transfer skills, and preferably current Microsoft security, CISSP, CCSP, CISM, architecture, or project-delivery credentials.

Skills

Azure Security Architecture
Azure Landing Zones
Cloud Security Governance
Azure Policy
Identity and Privileged Access Management
Azure Networking
Microsoft Defender for Cloud
Microsoft Sentinel
Azure Monitor and Log Analytics
Data Protection and Key Management
Secure DevOps and Infrastructure as Code
Cloud Threat Modeling
Security Control Assurance
Resilience and Recovery Architecture
Architecture Roadmapping
Stakeholder Leadership

Benefits

Referral Program

Visa sponsorship

Not detected in the job text

Keywords

Microsoft Azure
Azure Landing Zones
Management Groups
Azure Policy
Azure RBAC
Privileged Identity Management
Conditional Access
Managed Identities
Azure Key Vault
Azure Networking
Network Segmentation
Microsoft Defender for Cloud
Microsoft Sentinel
Azure Monitor
Log Analytics
Azure DevOps
Infrastructure as Code
Policy as Code
Cloud Security Architecture
Cloud Governance
Data Classification
Encryption and Key Management
Threat Modeling
Control Assurance
Ransomware Resilience
Microsoft Certified: Cybersecurity Architect Expert
CISSP
CCSP
CISM
TOGAF

Report this job