Enterprise Architect, AI Engineering – Security & Compliance

Toast; Toronto; On-site; CAD 150,000 - 230,000; Full time

Benefits offered by this job

Total rewards program

Competitive compensation framework

Security standards leadership

Architecture ownership in AI

Frontier in AI security

Job summary

Toast is recruiting on behalf of a prominent Canadian professional services firm to lead Enterprise Architecture for AI Engineering, with a strong emphasis on security, compliance, and production readiness. The role is based in Toronto and requires guiding security and architecture across cloud services, DevSecOps tooling, and governance for AI platforms.

You will author architecture documentation, review changes for risk and compliance, and partner with engineering and security teams to embed

Qualifications

• University degree in computer science, engineering, cybersecurity, information systems or a related discipline.
• Significant experience in enterprise, solution, cloud or security architecture within complex enterprise environments.
• Strong experience designing and reviewing production-grade cloud applications and platforms across applications, APIs, data, infrastructure, identity, networking, security and operations.
• Deep knowledge of cloud security and secure-by-design principles, including identity and access management, least privilege, network security, encryption, secrets management, logging, monitoring and vulnerability management.
• Experience with Microsoft Azure and cloud-native architecture; hands-on experience with Azure networking, Entra ID, Key Vault, Application Gateway/WAF, Azure Front Door, Azure Container Apps or Kubernetes, Azure Monitor, Defender for Cloud and Sentinel would be a plus.
• Strong understanding of modern DevSecOps and SDLC tooling, including source control, CI/CD, infrastructure-as-code, software composition analysis, SAST, container and image scanning and artifact management.
• Experience with GitHub, Terraform, containers and automated deployment pipelines, plus the ability to assess new tooling for architecture, security and enterprise readiness.
• Strong understanding of security and compliance frameworks such as NIST-based controls, ISO standards, secure SDLC practices and enterprise technology risk management.
• Experience supporting architecture, cybersecurity, risk, compliance and audit reviews and producing the documentation and evidence that demonstrates control effectiveness.
• Experience assessing vulnerabilities, determining risk, identifying mitigating controls and working through risk-acceptance and exception processes.
• Familiarity with security considerations for generative AI and agentic systems, including enterprise data access, identity, model and service integrations, content safety and governance.
• Ability to translate complex technical and security topics into clear decisions, risks and recommendations for technical teams and senior stakeholders.
• Strong collaboration, organizational and written communication skills, with the ability to drive work across multiple enterprise groups.

Responsibilities

• Author and maintain high-level architecture documentation and Technical Architecture Documents covering application, data, integration, cloud infrastructure, network, identity, security, deployment and operations.
• Ensure new solutions and material changes align with enterprise architecture, cloud, security, data and technology standards.
• Lead security architecture and production-readiness reviews, identifying required controls, risks and remediation, and coordinating approvals to move solutions into production.
• Govern vulnerabilities and security findings across applications, infrastructure, containers, dependencies and cloud environments, driving remediation and coordinating mitigating controls, exceptions or risk acceptance.
• Review significant application, infrastructure, network, platform and AI-related changes for architecture, security and compliance impact.
• Build and evolve reusable architecture patterns, security controls and guardrails so teams can deliver securely and consistently.
• Review, select and govern SDLC tooling, including source control, CI/CD, infrastructure-as-code, security scanning, artifact management and deployment tooling.
• Act as the primary compliance and control reviewer for AI Engineering, maintaining evidence and supporting internal reviews, external assessments, certifications and audits.
• Partner with engineering, DevOps/SRE, platform and product teams to embed secure-by-design practices across identity, least privilege, network security, secrets management, logging, monitoring and data protection.
• Assess the security and architecture implications of AI technologies, including models, agents, enterprise data integrations, AI platforms, content-safety controls and third-party services.
• Track key architecture decisions, risks, exceptions and remediation commitments, and communicate material issues to AI Engineering leadership and enterprise stakeholders.
• Stay current on cloud, cybersecurity, AI security, enterprise architecture and regulatory developments and translate them into practical standards and controls.

Skills

Enterprise architecture

Cloud architecture

Security architecture

DevSecOps

SDLC tooling

Communication

Education

University degree in CS/Engineering/Cybersecurity

Tools

Azure

GitHub

Terraform

Kubernetes

CI/CD tooling

Entra ID

Key Vault

Job description

Job Description

Toast is recruiting on behalf of one of the largest professional services firms in Canada, a global audit, tax and advisory organization with more than 10,000 people across the country. Their AI Engineering team turns emerging AI capabilities into secure, scalable, production-ready applications and platforms used across the firm. As Enterprise Architect, AI Engineering (Security and Compliance), you will lead architecture across the team’s technology portfolio with a focus on security, compliance, risk and production readiness. You will be the key link between AI Engineering and the firm’s broader architecture, security and technology groups, guiding solutions safely into production. This is a full-time role based in Toronto.

Responsibilities

• Author and maintain high-level architecture documentation and Technical Architecture Documents covering application, data, integration, cloud infrastructure, network, identity, security, deployment and operations
• Ensure new solutions and material changes align with enterprise architecture, cloud, security, data and technology standards
• Lead security architecture and production-readiness reviews, identifying required controls, risks and remediation, and coordinating approvals to move solutions into production
• Govern vulnerabilities and security findings across applications, infrastructure, containers, dependencies and cloud environments, driving remediation and coordinating mitigating controls, exceptions or risk acceptance
• Review significant application, infrastructure, network, platform and AI-related changes for architecture, security and compliance impact
• Build and evolve reusable architecture patterns, security controls and guardrails so teams can deliver securely and consistently
• Review, select and govern SDLC tooling, including source control, CI/CD, infrastructure-as-code, security scanning, artifact management and deployment tooling
• Act as the primary compliance and control reviewer for AI Engineering, maintaining evidence and supporting internal reviews, external assessments, certifications and audits
• Partner with engineering, DevOps/SRE, platform and product teams to embed secure-by-design practices across identity, least privilege, network security, secrets management, logging, monitoring and data protection
• Assess the security and architecture implications of AI technologies, including models, agents, enterprise data integrations, AI platforms, content-safety controls and third-party services
• Track key architecture decisions, risks, exceptions and remediation commitments, and communicate material issues to AI Engineering leadership and enterprise stakeholders
• Stay current on cloud, cybersecurity, AI security, enterprise architecture and regulatory developments and translate them into practical standards and controls

Requirements

• University degree in computer science, engineering, cybersecurity, information systems or a related discipline
• Significant experience in enterprise, solution, cloud or security architecture within complex enterprise environments
• Strong experience designing and reviewing production-grade cloud applications and platforms across applications, APIs, data, infrastructure, identity, networking, security and operations
• Deep knowledge of cloud security and secure-by-design principles, including identity and access management, least privilege, network security, encryption, secrets management, logging, monitoring and vulnerability management
• Experience with Microsoft Azure and cloud-native architecture; hands-on experience with Azure networking, Entra ID, Key Vault, Application Gateway/WAF, Azure Front Door, Azure Container Apps or Kubernetes, Azure Monitor, Defender for Cloud and Sentinel would be a plus
• Strong understanding of modern DevSecOps and SDLC tooling, including source control, CI/CD, infrastructure-as-code, software composition analysis, SAST, container and image scanning and artifact management
• Experience with GitHub, Terraform, containers and automated deployment pipelines, plus the ability to assess new tooling for architecture, security and enterprise readiness
• Strong understanding of security and compliance frameworks such as NIST-based controls, ISO standards, secure SDLC practices and enterprise technology risk management
• Experience supporting architecture, cybersecurity, risk, compliance and audit reviews and producing the documentation and evidence that demonstrates control effectiveness
• Experience assessing vulnerabilities, determining risk, identifying mitigating controls and working through risk-acceptance and exception processes
• Familiarity with security considerations for generative AI and agentic systems, including enterprise data access, identity, model and service integrations, content safety and governance
• Ability to translate complex technical and security topics into clear decisions, risks and recommendations for technical teams and senior stakeholders
• Strong collaboration, organizational and written communication skills, with the ability to drive work across multiple enterprise groups

Benefits

• Compensation listed on the posting is for base salary. Total compensation includes base salary + annual bonuses.
• A comprehensive and competitive total rewards program
• Set the security and compliance standards that decide how AI moves into production at one of Canada’s largest professional services firms
• Own the architecture behind AI tools used by thousands of professionals and the clients they serve
• Shape the guardrails, patterns and tooling every AI Engineering team builds on, so your decisions scale across the whole portfolio
• Work at the front edge of AI security, from agentic systems to enterprise data integrations, in a firm building toward a technology-first future