SECURITY ARCHITECT Toronto (Hybrid) 2026-10-15

Gravity Conseil; Toronto; Hybrid; CAD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Zusammenfassung

Gravity Conseil is seeking a Security Architect to join our consulting team in a permanent, hybrid role. You will lead security reviews of architectures, advise on GenAI risk, and craft ADRs and reference architectures to guide client deployments.

You will partner with engineering and security leadership to embed AI-safe design patterns, govern LLM lifecycles, and promote structured reasoning across cloud, data, and API security domains.

Qualifikationen

• Experience in enterprise security architecture and governance.
• Experience designing GenAI-enabled security solutions.
• Ability to translate complex security concepts into ADRs and reference architectures.
• Familiarity with cloud, data, and API security across multiple platforms.

Aufgaben

• Lead security reviews of solution architectures, ADRs, and GenAI-enabled platforms.
• Author ADRs, patterns, and reference architectures for GenAI integration.
• Define controls for GenAI systems including model access and prompt protections.
• Provide technical leadership and mentorship on AI security and governance.
• Promote structured architectural reasoning with human and GenAI-assisted analysis.

Kenntnisse

Enterprise security architecture

GenAI security design

Security governance & ADRs

Technical writing & reasoning

Cloud, data, API security

Digital risk assessment

Tools

LangChain

OpenAI GPT

Guardrails AI

Jobbeschreibung

We are looking for a Security Architect to join our consulting team on a permanent basis. This is a hybrid position. As a Chrome Technologies consultant, the successful candidate will work with our clients to deliver the projects they have entrusted to us.

Key Responsibilities

Architecture Review & Advisory

• Lead security reviews of solution and domain architectures, ADRs, and AI-enabled platforms.


• Assess GenAI and agentic solution designs for model security, data protection, prompt integrity, provenance, and safe orchestration of agents.


• Evaluate proposals for alignment with enterprise standards, regulatory expectations, and risk tolerance.


• Produce actionable review comments with traceable recommendations, covering both traditional and AI-driven architectures.

Authoring & Governance

• Author and maintain ADRs, patterns, and reference architectures-including those covering GenAI system integration, LLM usage, and multi-agent frameworks.


• Ensure architectural documentation expresses the problem space, options, controls, and trade-offs clearly and defensibly.


• Promote structured architectural reasoning supported by both human and GenAI-assisted analysis workflows.

GenAI & Agentic Security

• Define and assess controls for GenAI systems, including:
  
  
  
  • Model access, data boundary, and prompt injection defenses.
  
  
  • Guardrails for AI agents performing autonomous actions or multi-step reasoning.
  
  
  • Secure orchestration, isolation, and human oversight mechanisms.
  
  
  
  


• Evaluate the security of agent frameworks, LLM pipelines, and model-hosting platforms (e.g., Vertex AI, Azure OpenAI).


• Contribute to enterprise policy for responsible AI use and GenAI-assisted development.

Technical Leadership

• Provide domain expertise in application, cloud, and data security-augmented by AI security design considerations.


• Support teams in safely embedding GenAI copilots, RAG systems, and autonomous agents within business processes.


• Lead threat modeling for composite systems where GenAI interacts with APIs, data stores, and user environments.

Continuous Improvement & Automation

• Use and refine GenAI tools for document review, security design assistance, and ADR quality assurance.


• Develop reusable prompts, review heuristics, and decision frameworks that enhance SARB throughput and consistency.


• Mentor peers in human-AI collaborative authoring, emphasizing accountability and verification of AI output.


• Build agentic AI security harnesses, prototypes, and POCs for new cyber capabilities.


• Research AI Security, Agentic AI, Application Security, quantum/PQC, blockchain, and other emerging technologies.


• Develop and integrate agents, LLMs, APIs, security tools, automation, and test environments.


• Evaluate new cybersecurity products and startups through hands‑on testing, benchmarking, and technical due diligence.


• Validate vendor claims and assess security, scalability, integration complexity, and enterprise applicability.


• Help transition successful research prototypes toward operational use.


• Present technical findings and recommendations to engineering, security leadership, and investment stakeholders

Core Competencies

• Enterprise security architecture (SABSA, TOGAF, NIST CSF).


• GenAI systems architecture, LLM lifecycle, and model governance.


• AI security patterns (threat modeling for LLMs, data leakage prevention, agent control).


• Strong authorship and analytical writing-clear articulation of decisions and consequences.


• Familiarity with tools for architectural diagramming, review automation, and GenAI-assisted design (e.g., LangChain, OpenAI GPT, Guardrails AI).


• Broad experience across cloud, data, application, and API securitydomains.