Sr Security Architect

Security Architect – Cybersecurity & Zero Trust

Location: Toronto, ON (Hybrid – up to 3 days onsite)

Experience: 7–10+ years

Engagement: Contract

Job Description

We are seeking an experienced Security Architect with strong expertise in Cyber Security Incident Response (CSIRT/SOC) and hands-on Zero Trust implementation. The successful candidate will strengthen incident response capabilities, improve security governance, and implement practical identity and network security controls across the enterprise.

Key Responsibilities

• Coordinate and manage cybersecurity incidents, including triage, containment, recovery, stakeholder communication, and post-incident reviews.
• Develop and enhance incident response policies, procedures, playbooks, standards, and governance processes.
• Prepare incident reports, executive briefings, status updates, and communications for internal and external stakeholders.
• Conduct security assessments and identify gaps in identity, access management, and network security.
• Implement and operationalize Zero Trust controls, including MFA, Conditional Access, privileged access management, and identity governance.
• Collaborate with security, infrastructure, and operational teams to integrate identity, endpoint, and network security solutions.
• Establish incident response metrics, support tabletop exercises, and drive continuous program improvement.
• Align security initiatives with emerging AI-driven cyber threats and evolving risk mitigation priorities.
• Maintain technical documentation and facilitate knowledge transfer to internal teams.

Required Qualifications

• 7–10+ years of cybersecurity experience, with strong exposure to CSIRT/SOC and incident response coordination.
• Proven experience managing cybersecurity incidents and communicating with internal and external stakeholders.
• Hands-on experience implementing Zero Trust technologies, particularly Identity and Access Management (IAM).
• Strong knowledge of Microsoft Entra ID, MFA, Conditional Access, RBAC, PAM/PIM, and identity governance.
• Understanding of network security, segmentation, secure access models, and Zero Trust Network Access (ZTNA).
• Experience with Microsoft security tools such as Defender and Sentinel, and AWS security services such as GuardDuty and Security Hub.
• Experience developing security policies, incident response playbooks, executive reports, and operational procedures.
• Excellent communication, stakeholder management, analytical, and problem-solving skills.
• Awareness of AI-driven cyber threats and their implications for incident response and security operations.

Nice to Have

• Experience in healthcare or public sector environments, preferably the Ontario health sector.
• Familiarity with NIST CSF, ISO 27001, and PHIPA.
• Relevant certifications such as CISSP, CISM, GIAC, or Azure Security Engineer.

Work Arrangement: Hybrid, with onsite attendance determined by the hiring manager. The resource must be based in Ontario for access to agency systems unless prior written approval is obtained.

• Interested candidates are encouraged to apply with their updated resumes.