OPEN: ServiceNow – Architect

Cpus Engineering Staffing Solutions Inc.; Oshawa; On-site; CAD 123,984 - 130,872; Full time

Job summary

Cpus Engineering Staffing Solutions Inc. is seeking a ServiceNow Architect for an 18-month contract based in Oshawa, Canada. This pivotal role involves designing, implementing, and improving ServiceNow capabilities focused on Security Incident Response, Vulnerability Response, and Integrated Risk Management.

The ideal candidate will have at least 3 years of experience, guiding implementations and collaborating with teams to ensure scalable and secure solutions. This position offers a hybrid work model with opportunities for continuous improvement in security and risk processes.

Qualifications

• 3+ years of hands-on experience with ServiceNow SIR/VR/IRM.
• Strong understanding of ServiceNow platform architecture.
• Experience in designing scalable security solutions.

Responsibilities

• Lead the architecture and implementation of ServiceNow modules.
• Collaborate with stakeholders to translate requirements into designs.
• Establish design standards for performance and scalability.

Skills

ServiceNow SIR/VR/IRM experience

Architecture design

Cybersecurity frameworks (NIST, ISO 27001)

REST APIs and integrations

Education

Bachelor's or relevant degree

Tools

ServiceNow

Vulnerability scanners

SIEM/SOAR

CMDB

Job description

We are currently requesting resumes for the following position: ServiceNow – Architect

Resume Due Date: Thursday, June 18th, 2026 (5:00 PM EST)

Job ID: 26-067

Number of Vacancies: 2

Level: MP5

Duration: 18 Months

Hours of work: 35 hours per week

Location: 1908 Colonel Sam Drive Oshawa

Work Mode: Hybrid – 3 days remote

Hourly Range: $90 – $95

Job Overview

• The ServiceNow Architect is responsible for the architecture, design, implementation, and continuous improvement of ServiceNow capabilities focused on Security Incident Response (SIR), Vulnerability Response (VR), and Integrated Risk Management (IRM).
• This role will provide technical and functional leadership to ensure scalable, secure, and sustainable solutions that align with enterprise governance, cybersecurity, risk, and compliance requirements.
• The successful candidate will work closely with Cybersecurity, Risk, Compliance, IT Operations, and delivery teams to define target-state architecture, guide implementations, and drive platform best practices across the ServiceNow ecosystem.
• Lead the end-to-end architecture, solution design, and implementation of ServiceNow SIR, VR, and IRM modules.
• Define scalable and supportable architecture patterns, data models, workflows, integrations, and governance controls for security and risk use cases.
• Collaborate with business stakeholders, cybersecurity teams, risk teams, compliance teams, and technical teams to translate requirements into solution designs.
• Provide architectural guidance for incident response workflows, vulnerability lifecycle processes, risk management frameworks, issue remediation, exceptions management, and policy/compliance processes.
• Establish and maintain platform design standards, guardrails, and best practices to ensure consistency, performance, scalability, and maintainability.
• Design and oversee integrations between ServiceNow and upstream/downstream tools such as security tools, vulnerability scanners, SIEM/SOAR platforms, CMDB, asset systems, and enterprise applications.
• Support roadmap planning and recommend improvements to mature security and risk processes enabled through ServiceNow.
• Ensure solutions align with enterprise architecture, data governance, security, audit, and operational support requirements.
• Provide technical leadership during implementation projects, enhancements, upgrades, and operational sustainment activities.
• Review and approve detailed solution designs, technical configurations, integration patterns, and data flows delivered by developers or implementation partners.
• Support testing strategy, deployment planning, release governance, and transition to operations.
• Drive continuous improvement by identifying opportunities to improve automation, reporting, user experience, process efficiency, and control effectiveness.

Architecture & Solution Design

• Develop target-state and transition-state architecture for ServiceNow SIR, VR, and IRM capabilities.
• Create solution designs for workflows, data models, forms, portals, dashboards, notifications, business rules, integrations, and role-based access.
• Define patterns for risk registers, issues, controls, policy exceptions, remediation tracking, and vulnerability response orchestration.
• Ensure appropriate use of CMDB, CI relationships, asset data, and service context to support security and risk use cases.

Process Design & Implementation

Design and optimize processes for:

• Security incident intake, triage, investigation, containment, and remediation
• Vulnerability identification, prioritization, assignment, remediation, and exception management
• Risk identification

Qualifications

ServiceNow Platform & Architecture

• Minimum of 3 years of hands-on experience with SIR/VR/IRM, guiding and reviewing vendor implementations
• Strong understanding of ServiceNow platform architecture, data model, and application framework
• Experience designing scalable solutions across SIR (Security Incident Response), VR (Vulnerability Response), and IRM
• Ability to define end-to-end solution architecture (workflows, forms, integrations, reporting)

Security & Risk Domain Knowledge – Deep understanding of:

• Security incident lifecycle (triage → containment → resolution)
• Vulnerability management lifecycle (identify → prioritize → remediate → exception handling)
• Risk management concepts (risk register, controls, issues, policy/compliance)
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) is a strong asset

Process Design & Implementation – Experience designing and optimizing:

• Incident response workflows
• Vulnerability remediation processes
• Risk and compliance processes
• Strong alignment to ITIL and risk governance best practices
• Integration & Data Management

• REST APIs, web services, and integrations
• Data ingestion, normalization, and reconciliation
• Integrating with tools such as vulnerability scanners, SIEM/SOAR, CMDB, and asset systems