Security Architecture Advisor

COFOMO; Quebec; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

COFOMO is seeking a Security Architecture Advisor in Quebec City, hybrid. The role focuses on leading digital security initiatives, designing secure architectures, and guiding risk assessments for, and across, on-premises and cloud environments.

You will interact with senior leadership to shape security strategy and governance. Ideal candidates bring experience with Zero Trust, identity management, and ISO/IEC 27001 controls, plus practical knowledge of Windows Server and Entra ID.

Qualifications

• Four years of IT experience with digital security mandates.
• Experience delivering security architecture studies, positioning or opinions.
• Experience with hybrid on-premises and cloud environments.
• Familiarity with security technologies such as network segmentation, Zero Trust, and container security.
• Experience drafting executive summaries for senior management.
• Experience with ISO/IEC 27001 family controls.
• Experience with Windows Server 2019+/Windows 10/11 and Entra ID.
• Knowledge of identity, access and privilege management technologies (PKI/PKI, certificates).

Responsibilities

• Participate in creating opportunity files, business cases, and architecture views.
• Advise on digital security projects and compliant solutions.
• Define security architectures for infrastructures and applications.
• Advise managers and decision-makers on security priorities.
• Conduct threat and risk assessments for new technologies.
• Perform safety analyses and assess impacts on security operations.
• Collaborate with various teams during integration meetings and workshops.
• Explain safety issues to committees to aid decision-making.

Skills

Security architecture

Threat assessment

Hybrid cloud

Zero Trust

Identity management

Entra ID

ISO 27001

Windows Server

Active Directory

SCCM

PKI

Containers

IaaS/PaaS

Tools

SCCM

MDT

SCOM

Job description

87572# Security Architecture AdvisorQuebec CityHybridArchitecture and Technology GovernanceApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job description**Here is a brief overview of the tasks and responsibilities that will fall to you:*** Participate in the production of opportunity files, business cases as well as vision, overview and detailed architectures;* Advise on business and technological projects in the field of digital security and recommend solutions that comply with the guidelines, standards and rules in force;* Support teams in the development and implementation of infrastructures and applications by defining the security architectures and requirements to be respected;* Exercise an advisory role to managers, business teams and decision-makers and contribute to strategic directions in terms of safety;* Conduct threat and risk assessments related to the introduction of new technologies or services;* Perform safety analyses and evaluate the impacts of proposed solutions on security operations;* Recommend priorities for action and contribute to the assessment of associated costs;* Participate in the evolution of the digital information security architecture and ensure compliance with security norms and standards;* Validate deliverables for projects and continuity activities;* Collaborate with business, information, applications and technology specialists during integration meetings and workshops;* Present and popularize safety issues to various committees in order to support decision-making;* Ensure the transfer of expertise to the internal resources concerned.**The profile we are looking for is as follows:*** Have at least four (4) years of experience in information technology in carrying out digital security mandates;* Have completed, in the last four (4) years, at least two (2) mandates of 50 person-days or more as a security architecture consultant, in particular in the realization of studies, positioning or security opinions;* Have completed, in the last four (4) years, at least one (1) security architecture or technology orientation mandate in a hybrid on-premise and cloud computing environment;* Have relevant experience with security technologies or concepts such as network segmentation, Zero Trust, server and operating system hardening, containers, SaaS solutions, APIs, Active Directory and Microsoft Entra ID;* Have participated, in the last four (4) years, in the drafting of at least two (2) executive summaries in information security for senior management;* Have participated, in the last four (4) years, in at least one (1) mandate integrating principles, controls or processes from ISO/IEC 27001, 27002 or 27005 standards;* Have completed, in the last four (4) years, at least one (1) security mandate of 50 person-days or more in a corporate technology environment;* Relevant experience with Windows Server 2019 or later, Windows 10/11, Active Directory, Microsoft Entra ID, Linux, or server virtualization and administration environments;* Be familiar with operating, deployment or administration tools such as SCOM, SCCM or MDT;* Knowledge of identity, access and privilege management technologies, as well as concepts related to encryption, cryptography, PKI/PKI, PGP and certificates;* Experience with IaaS, PaaS or SaaS cloud environments;* Familiarity with technologies used in large enterprise environments, including SAP and related security tools, where applicable.Apply