Security Architect

TEEMA Group; Calgary; On-site; CAD 165,000 - 220,000; Full time

Job summary

TEEMA Group in Calgary, Canada is seeking a Senior Security Architect to lead enterprise security architecture across on‑premise, hybrid, and multi‑cloud environments. You will define secure design patterns, enforce secure-by-design principles, and drive risk-based controls across infrastructure and applications.

The role requires extensive experience in threat modeling, vulnerability assessments, and security governance.

Qualifications

• Senior-level experience with network/security architecture across on-premise, hybrid, and cloud environments.
• Expertise in designing secure topologies, IAM, and cloud security guardrails.
• Proven ability to lead threat modeling, risk management, and security governance programs.

Responsibilities

• Handle security architecture, design enterprise security frameworks across multi-clouds (AWS, Azure, GCP).
• Lead threat modeling workshops and perform vulnerability assessments and risk analyses.
• Ensure compliance with NIST, ISO 27001, SOC 2, PCI-DSS; document policies and architecture decisions.
• Develop IAM frameworks (RBAC, least privilege, PAM, SSO) and cloud security provisioning standards.
• Collaborate with engineering/DevOps/product teams to embed security into CI/CD pipelines; support incident response.

Skills

Network security

Cloud security

Application security

Endpoint protection

Threat detection

Tools

SIEM

SOAR

Vulnerability scanners

Cloud-native security platforms

Job description

Job Title: Security Architect Job ID: 90634 Location: Calgary, Alberta

What you will be doing:

Security Architecture & Design

• Develop and maintain enterprise security architecture frameworks and reference models across on?premise, hybrid, and multi?cloud environments (AWS, Azure, GCP).

• Design secure network topologies, segmentation strategies, VPN/SD?WAN configurations, and perimeter controls to minimize attack surface and blast radius.

• Define and enforce secure-by-design principles, clean?core patterns, and standardized security controls for infrastructure, applications, and cloud services.

Risk Management & Threat Modeling

• Lead threat modeling workshops to identify attack vectors, enumerate threat scenarios, and define mitigation strategies tied to business risk.

• Conduct vulnerability testing, risk analyses, and security assessments across systems, networks, and applications.

• Prepare and maintain a security risk management plan, including remediation roadmaps and prioritized control implementation.

Governance, Compliance & Policy

• Ensure compliance with evolving laws, regulations, and industry standards (NIST, ISO 27001, SOC 2, PCI?DSS).

• Define security assurance requirements and ensure all acquired or developed systems align with organizational cybersecurity policies.

• Document security policies, procedures, architecture decisions, and technical reports.

Identity, Access & Cloud Security

• Architect IAM frameworks including RBAC, least privilege, PAM, SSO, and integration with SAML/OAuth/OpenID Connect providers.

• Develop cloud security guardrails, secure provisioning templates, and IaC scanning standards to ensure consistent cloud hardening.

• Validate cloud-native controls and ensure secure deployment patterns across containerized and serverless environments.

Collaboration & Stakeholder Engagement

• Partner with engineering, DevOps, product, and operations teams to embed security into CI/CD pipelines (SAST, DAST, container scanning, IaC scanning).

• Collaborate with business units to establish an effective cybersecurity risk management program.

• Communicate security trade-offs, architectural decision, and risk impacts to executives and non?technical stakeholders.

Incident Preparedness & Continuity

• Recognize and define disaster recovery and business continuity requirements, including failover and backup strategies.

• Support incident response teams with architectural guidance during cybersecurity events.

What you must have:

• Senior Experience (7 years +) of network security, cloud security, application security, endpoint protection, and threat detection systems. Experience with security tools such as SIEM, SOAR, vulnerability scanners, and cloud-native security platforms.

• You have demonstrable understanding and experience of the following – ‘A Cyber Security Architect plays a critical role in protecting the organization from evolving threats. Poor judgment or flawed designs can introduce exploitable vulnerabilities that jeopardize business operations and data integrity.’

• Experience in designing and implementing security architectures for large organizations.

Salary/Rate: $140.00/ hour