SECURITY ARCHITECT
- Toronto, ON, Canada
Hybrid
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Workplace
- Hybrid
- Apply by
- Posting language
- English
- Posted
Original job description
Référence
2290/TOR/1510
Date de démarrage
ASAP
Localisation du poste
Toronto (Hybrid)
Durée
Permanent
Description
We are looking for a Security Architect to join our consulting team on a permanent basis.
This is a hybrid position.
As a Chrome Technologies consultant, the successful candidate will work with our clients to deliver the projects they have entrusted to us.
Tâches
The Security Architect will be part of a team who's role is to assure enterprise security architecture with a focus on the review and authorship of Architecture Decision Records (ADRs) and Security Architecture Review Board (SARB) submissions. The role blends deep technical acumen with emerging expertise in Generative AI (GenAI) and agentic systems, ensuring secure design, governance, and responsible adoption of intelligent automation within the enterprise.
Key Responsibilities
Architecture Review & Advisory
Core Competencies
Retour
2290/TOR/1510
Date de démarrage
ASAP
Localisation du poste
Toronto (Hybrid)
Durée
Permanent
Description
We are looking for a Security Architect to join our consulting team on a permanent basis.
This is a hybrid position.
As a Chrome Technologies consultant, the successful candidate will work with our clients to deliver the projects they have entrusted to us.
Tâches
The Security Architect will be part of a team who's role is to assure enterprise security architecture with a focus on the review and authorship of Architecture Decision Records (ADRs) and Security Architecture Review Board (SARB) submissions. The role blends deep technical acumen with emerging expertise in Generative AI (GenAI) and agentic systems, ensuring secure design, governance, and responsible adoption of intelligent automation within the enterprise.
Key Responsibilities
Architecture Review & Advisory
- Lead security reviews of solution and domain architectures, ADRs, and AI-enabled platforms.
- Assess GenAI and agentic solution designs for model security, data protection, prompt integrity, provenance, and safe orchestration of agents.
- Evaluate proposals for alignment with enterprise standards, regulatory expectations, and risk tolerance.
- Produce actionable review comments with traceable recommendations, covering both traditional and AI-driven architectures.
- Author and maintain ADRs, patterns, and reference architectures-including those covering GenAI system integration, LLM usage, and multi-agent frameworks.
- Ensure architectural documentation expresses the problem space, options, controls, and trade-offs clearly and defensibly.
- Promote structured architectural reasoning supported by both human and GenAI-assisted analysis workflows.
- Define and assess controls for GenAI systems, including:
- Model access, data boundary, and prompt injection defenses.
- Guardrails for AI agents performing autonomous actions or multi-step reasoning.
- Secure orchestration, isolation, and human oversight mechanisms.
- Evaluate the security of agent frameworks, LLM pipelines, and model-hosting platforms (e.g., Vertex AI, Azure OpenAI).
- Contribute to enterprise policy for responsible AI use and GenAI-assisted development.
- Provide domain expertise in application, cloud, and data security-augmented by AI security design considerations.
- Support teams in safely embedding GenAI copilots, RAG systems, and autonomous agents within business processes.
- Lead threat modeling for composite systems where GenAI interacts with APIs, data stores, and user environments.
- Use and refine GenAI tools for document review, security design assistance, and ADR quality assurance.
- Develop reusable prompts, review heuristics, and decision frameworks that enhance SARB throughput and consistency.
- Mentor peers in human-AI collaborative authoring, emphasizing accountability and verification of AI output.
- Build agentic AI security harnesses, prototypes, and POCs for new cyber capabilities.
- Research AI Security, Agentic AI, Application Security, quantum/PQC, blockchain, and other emerging technologies.
- Develop and integrate agents, LLMs, APIs, security tools, automation, and test environments.
- Evaluate new cybersecurity products and startups through hands-on testing, benchmarking, and technical due diligence.
- Validate vendor claims and assess security, scalability, integration complexity, and enterprise applicability.
- Help transition successful research prototypes toward operational use.
- Present technical findings and recommendations to engineering, security leadership, and investment stakeholders
Core Competencies
- Enterprise security architecture (SABSA, TOGAF, NIST CSF).
- GenAI systems architecture, LLM lifecycle, and model governance.
- AI security patterns (threat modeling for LLMs, data leakage prevention, agent control).
- Strong authorship and analytical writing-clear articulation of decisions and consequences.
- Familiarity with tools for architectural diagramming, review automation, and GenAI-assisted design (e.g., LangChain, OpenAI GPT, Guardrails AI).
- Broad experience across cloud, data, application, and API securitydomains.
Retour
More about this job
Responsibilities
Review solution architectures, Architecture Decision Records, and AI-enabled platforms, and provide actionable security recommendations aligned with enterprise standards and risk expectations. Develop security architecture guidance and controls for GenAI and agentic systems, lead threat modeling and research, and help teams evaluate and operationalize emerging cybersecurity capabilities.
Requirements
The role calls for broad experience in enterprise security architecture across cloud, data, application, and API security, along with knowledge of GenAI architecture, LLM lifecycles, and model governance. Candidates should be able to assess AI security risks and controls, write clear architectural decisions, and be familiar with architecture frameworks such as SABSA, TOGAF, and NIST CSF, as well as tools such as LangChain, OpenAI GPT, and Guardrails AI.
Skills
- Enterprise Security Architecture
- Generative AI Security
- LLM Security
- Agentic AI Security
- Threat Modeling
- Cloud Security
- Application Security
- Data Security
- API Security
- Model Governance
- Prompt Injection Defense
- Data Leakage Prevention
- Security Architecture Reviews
- Architecture Decision Records
- Technical Writing
- Security Research
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
- Software
- Science & Research
Keywords
- Enterprise Security Architecture
- SABSA
- TOGAF
- NIST CSF
- Generative AI
- Agentic AI
- LLM Lifecycle
- Model Governance
- Architecture Decision Records
- Security Architecture Review Board
- Threat Modeling
- Prompt Injection
- Data Leakage Prevention
- Vertex AI
- Azure OpenAI
- LangChain
- OpenAI GPT
- Guardrails AI
- Cloud Security
- Application Security
- Data Security
- API Security
- RAG Systems
- Multi-Agent Frameworks
- Quantum Security
- Post-Quantum Cryptography
- Blockchain
- Security Automation
- Responsible AI
- Vendor Due Diligence