Security Architect

AfxInfra; Toronto; On-site; CAD 120,000 - 160,000; Full time

Job summary

AfxInfra is seeking an experienced Security Architect to design and develop enterprise security architecture patterns across a broad range of cybersecurity domains and technologies. This architecture-focused role requires broad knowledge and the ability to translate security requirements into scalable patterns for applications, cloud and DevSecOps environments.

The ideal candidate will evaluate capabilities, identify gaps, and develop reusable security patterns to enable a more integrated,

Qualifications

• Significant experience in Cybersecurity Architecture, Enterprise Security Architecture or Solution Security Architecture.
• Broad understanding of cybersecurity technologies and how security capabilities interact across the enterprise.
• Ability to create reference architectures, security patterns, architecture standards and roadmaps.
• Experience assessing platforms for coverage, gaps, integration opportunities and tool rationalization.
• Strong understanding of attack paths, exposure management and defense-in-depth.

Responsibilities

• Develop enterprise-level security architecture patterns, standards and reference architectures.
• Drive security platformization, consolidating capabilities and improving interoperability.
• Assess tools and platforms against enterprise requirements and identified gaps.
• Define integration patterns between security platforms and development pipelines.
• Translate security requirements into scalable architectures with cross-functional teams.
• Evaluate new cybersecurity technologies for fit within the enterprise architecture.

Skills

Security Architecture

Enterprise Security Architecture

Solution Security Architecture

DevSecOps

Cloud Security

IAM / Zero Trust

API Security

Security Operations

Security Patterns

Education

Bachelor's degree in Computer Science or related

Relevant security certifications (optional)

Tools

SABSA framework

TOGAF

CSPM / CNAPP concepts

Job description

Security Architect – Cybersecurity Platforms & Architecture

We are seeking an experienced Security Architect to design and develop enterprise security architecture patterns across a broad range of cybersecurity domains and technologies.

This is an architecture-focused role requiring broad knowledge across the cybersecurity ecosystem rather than specialization in a single security product. The successful candidate will evaluate existing and emerging security capabilities, identify architectural and attack-path gaps, and develop reusable security patterns that enable a more integrated, scalable and platform-oriented security environment.

Key Responsibilities

• Develop enterprise-level security architecture patterns, standards and reference architectures across multiple cybersecurity domains.
• Drive security platformization, identifying opportunities to consolidate capabilities, improve interoperability and reduce fragmented or overlapping security tooling.
• Assess security tools and platforms against enterprise requirements, architecture principles and identified attack paths/exposure scenarios.
• Identify gaps in existing security capabilities and recommend architectural approaches to reduce risk and strengthen preventative, detective and responsive controls.
• Design security patterns spanning applications, APIs, cloud, identity, infrastructure and DevSecOps environments.
• Define integration patterns between security platforms, enterprise technology platforms and development pipelines.
• Work with cybersecurity, cloud, infrastructure, application and engineering teams to translate security requirements into scalable technical architectures.
• Evaluate new cybersecurity technologies and determine how they fit within the broader enterprise security architecture.

Core Security Domains

Network & API Security

• Network security architecture and segmentation
• Web Application Firewalls (WAF)
• API security and API protection patterns
• Harness API Security or comparable API security platforms
• Cloud Security Posture Management (CSPM)
• Cloud-Native Application Protection Platforms (CNAPP)
• Cloud workload, configuration and identity security
• Security architecture across major public cloud environments

Identity & Access Management

• SailPoint
• Identity governance and administration
• Authentication, authorization, privileged access and Zero Trust patterns

Application Security & DevSecOps

• Secure SDLC and DevSecOps architecture
• SAST, DAST and Software Composition Analysis (SCA)
• Integration of security controls into CI/CD pipelines
• Application and software supply-chain security patterns

Infrastructure as Code (IaC) Security

• Secure IaC development and deployment patterns
• IaC scanning and policy enforcement
• Security guardrails integrated into DevSecOps pipelines

Security Operations

• SOAR and security automation
• Security telemetry, correlation and integration patterns
• Integration of preventative and detective security controls

What We're Looking For

The ideal candidate will have:

• Significant experience in Cybersecurity Architecture, Enterprise Security Architecture or Solution Security Architecture.
• Broad understanding of cybersecurity technologies and how security capabilities interact across the enterprise.
• Demonstrated ability to create reference architectures, security patterns, architecture standards and technology roadmaps.
• Experience assessing security platforms for capability coverage, architectural gaps, integration opportunities and tool rationalization.
• Strong understanding of attack paths, exposure management and defense-in-depth principles.
• Ability to operate at both the conceptual architecture level and at sufficient technical depth to challenge designs and technology decisions.
• Experience working with large, complex enterprise environments and cross-functional architecture and engineering teams.
• Strong communication and documentation skills with the ability to present complex security architectures to both technical and senior stakeholders.

Preferred Qualifications

• Experience with architecture frameworks and methodologies such as SABSA, TOGAF or equivalent.
• Relevant security certifications such as CISSP, CCSP, SABSA, cloud security or vendor-specific certifications are considered an asset.

Role Type: Security Architecture

Focus: Enterprise Cybersecurity Architecture, Security Platforms, DevSecOps, Cloud, IAM, API Security and Security Operations