IT Security Design Specialist
- Ottawa, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Location: Ottawa, ON (On-site)
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
- Design, assess, and recommend security architectures for enterprise IM/IT systems.
- Design and assess audit, monitoring, logging, accountability, and security event management architectures.
- Develop future-state security architectures, security capability models, and security principles catalogues.
- Produce security control frameworks, security requirements baselines, and architecture assessments.
- Evaluate digital sovereignty, data residency, and cross-jurisdictional security considerations.
- Assess security considerations for enterprise architecture, interoperability, and modernization of complex environments.
- Identify and recommend security controls and safeguards in accordance with ITSG-33, NIST, or equivalent frameworks.
- Define target-state security capability models addressing IAM, Zero Trust, auditability, and monitoring.
- Address security zoning, compartmentation, information exchange security, and data protection requirements.
- Develop encryption, cryptographic key management, resilience, business continuity, and disaster recovery requirements.
- Map security capabilities to business and operational requirements.
- Produce advisory reports and recommendations to inform procurement, solution evaluation, and implementation planning.
- 10+ years of experience providing IT security design, architecture, and security assessment services in protected environments, including the development, assessment, and implementation of security architectures for complex IM/IT systems and modernization initiatives.
- Experience designing, assessing, and recommending security architectures for enterprise IM/IT systems.
- Experience designing or assessing audit, monitoring, logging, accountability, and enterprise security capability architectures.
- Experience developing future-state security architectures, security capability models, security principles catalogues, and security control frameworks.
- Experience evaluating digital sovereignty, data residency, and cross-jurisdictional security considerations.
- Experience identifying and recommending security controls and safeguards in accordance with ITSG-33, NIST, or equivalent security frameworks.
- One of the following certifications required: CISSP, CCSP, GIAC Certified Intrusion Analyst, or GIAC Certified Enterprise Defender (multiple certifications preferred).
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
More about this job
Responsibilities
Design, assess, and recommend security architectures, controls, and future-state capabilities for complex enterprise IM/IT systems, including modernization initiatives. Develop security requirements and advisory recommendations addressing sovereignty, data protection, monitoring, resilience, procurement, and implementation planning.
Requirements
Requires 10+ years of IT security design, architecture, and assessment experience in protected environments, including work on complex IM/IT systems. Requires at least one of CISSP, CCSP, GIAC Certified Intrusion Analyst, or GIAC Certified Enterprise Defender; Secret security clearance and Controlled Goods eligibility are also required.
Skills
- Security Architecture
- IT Security Design
- Security Assessments
- Audit And Monitoring Architecture
- Logging And Accountability
- Security Event Management
- Security Capability Modeling
- Security Control Frameworks
- Digital Sovereignty
- Data Residency
- ITSG-33
- NIST
- Identity And Access Management
- Zero Trust
- Cryptographic Key Management
- Business Continuity And Disaster Recovery
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
Keywords
- Enterprise IM/IT Systems
- Security Architecture
- Security Assessments
- ITSG-33
- NIST
- CISSP
- CCSP
- GIAC Certified Intrusion Analyst
- GIAC Certified Enterprise Defender
- Secret Security Clearance
- Controlled Goods
- Auditability
- Security Monitoring
- Logging
- Security Event Management
- Digital Sovereignty
- Data Residency
- Cross-Jurisdictional Security
- Identity And Access Management
- Zero Trust
- Security Zoning
- Compartmentation
- Information Exchange Security
- Data Protection
- Encryption
- Cryptographic Key Management
- Resilience
- Business Continuity
- Disaster Recovery
- Enterprise Architecture