Senior Architect - Cybersecurity

Manulife; Toronto; Hybrid; CAD 113,000 - 163,000; Full time

Benefits offered by this job

Health benefits

Pension plans

Employee assistance program

Paid time off

Job summary

Manulife is seeking a Senior Cybersecurity Architect to design and implement security solutions across IAM, SIEM, and IR automation for the US business segment, aligning with a Zero-Trust approach. The role collaborates with IT and business units to develop technology roadmaps and governance while maintaining strong security postures.

The position is based in Toronto, Canada (hybrid) with an emphasis on secure architectures, incident response collaboration, and vendor management.

Qualifications

• 7+ years of relevant work experience in cyber security.
• Experience with AuthN/AuthZ, transport security, secure configuration.
• Knowledge of Vault capabilities and SIEM systems.
• Threat modeling and secure testing methodologies.

Responsibilities

• Develop security strategies and roadmaps with a Zero-Trust focus.
• Design security architectures for Security Operations and SIEM integration.
• Develop and support security solutions in GRC, SOC, SIEM and IAM domains.
• Understand complex integrations to ensure data integrity and strong security.
• Create and maintain reference architectures and implementation patterns.

Skills

Zero-Trust

IAM

SIEM

IR automation

Threat modeling

Cloud Native Architecture

Azure

AWS

GCP

Scripting/Automation

Agile

NIST

Education

Bachelor's Degree preferred

Master's Degree a plus

Tools

Vault

Job description

Job Description:

The Senior Cybersecurity Architect is responsible for supporting projects that apply new and existing technologies and solutions to solve business needs in the cyber security space, for the US business segment. This Architect works with other architects, engineers, technical SMEs, and operational support staff both within IT and other business units to provide and maintain solutions that meet business and technical requirements.

The Architect will assist in the development of technology roadmaps and documentation; act as the subject matter expert in a variety of cyber security domains such as Identity and Access Management (IAM), SIEM integration, IR automation, etc. The Architect will maintain a solid understanding of the entire Information Security landscape. This role is a unique opportunity to join a team and company whose work will have direct impact on company direction, our customers, and our industry.

Office location: Toronto - Canada (preferred) or Boston - USA (alternative)

Work arrangement: Hybrid - 3 days in office, 2 days from Home; Remote working option is not available.

Position Responsibilities:

• Assist in the development of security strategies and implementation roadmaps centered around a Zero-Trust philosophy.
• Design security architecture for Security Operations and integration with SIEM (both in-cloud/on-prem).
• Develop and support key security solutions in the GRC, SOC, SIEM and IAM space.
• Understand complex modern and legacy integrations and business information models to ensure integrity and a strong security profile.
• Developing large enterprise solutions with respect to developing security controls, methods to mitigate security risks.
• Participate and lead conceptual, solution, and component-level architectures and associated artifacts.
• Support the evaluations of third-party suppliers, products and solutions with a focus on the security aspects of the solutions.
• Review, advise, and provide feedback on architectures produced within and outside the team.
• Develop reference architecture and reference implementation patterns related to security solutions.
• Participate in internal investigations and incident response events.
• Ability to influence security vendors to resolve issues and update roadmaps.
• Partner with other architects in IT, enterprise security and services teams in designing and maintaining modern and secure solutions.
• Research and evaluate impact of new vulnerabilities, security alerts and threat intelligence.
• Stay informed of new security technologies and solutions to assist in the on-going development of the overall security strategy.
• Build and maintain relationships with key customer's technical staff members and with internal stakeholders from IT, customer service and field operations.
• Promote a corporate culture that is committed to information security best practices.
• Participate in after-hours support as needed to respond to security incidents.
• Function with a high degree of integrity with an ability to keep information confidential.
• Be able to provide hands‑on configuration and support for the projects and services you are involved in.

Required Qualifications:

• Minimum of 7+ years of relevant work experience related to cyber security.
• Experience and knowledge of security functions (AuthN, AuthZ, Transport Security, Secure Configuration, Data validation/sanitizations, security exceptions logging)
• Knowledge of Vault capabilities and Security Incident and Event management systems
• Experience with Threat modeling and secure testing methodologies.
• Experience with Cloud Native (12-Factor) Architecture and Infrastructure Patterns.
• Proficient across multiple operating systems such as Microsoft, Apple and Linux.
• Fundamental understanding of network protocols and network security concepts.
• Familiarity with Cloud (SaaS, IaaS, PaaS) environments and best practices for securing these environments with experience in Azure, AWS or GCP.
• Familiarity with incident response tools and digital forensics concepts preferred.
• Knowledge of industry frameworks such as NIST.
• Detail-oriented with strong conceptual, analytical, problem solving, decision making and planning skills.
• Must have the ability to utilize application, scripting and operating system commands to configure, debug, and monitor large scale production systems.
• Knowledge of modern software development lifecycles, including Agile and iterative development.
• Excellent written and oral communication skills; and demonstrated ability to interact with technical, non-technical, and business members of the organization.
• Ability to accurately interpret business direction and clarify technology's alignment with stakeholder needs.

Preferred qualifications:

• Bachelor's Degree preferred, Master's Degree a plus.
• CISSP or other security certifications are a plus.

For USA hirings, Base Salary range: $107,450 USD - $153,500 USD (mid-point) - $199,550 USD.

Acerca de Manulife y John Hancock

Manulife Financial Corporation es un importante proveedor internacional de servicios financieros que ayuda a las personas a tomar decisiones de una manera más fácil y a vivir mejor. Para obtener más información acerca de nosotros, visite http://www.manulife.com .

Manulife es un empleador que ofrece igualdad de oportunidades

En Manulife/John Hancock, valoramos nuestra diversidad. Nos esforzamos por atraer, formar y retener una fuerza laboral tan diversa como los clientes a los que prestamos servicios, y para fomentar un entorno laboral inclusivo en el que se aprovechen las fortalezas de las culturas y las personas. Estamos comprometidos con la equidad en las contrataciones, la retención de talento, el ascenso y la remuneración, y administramos todas nuestras prácticas y programas sin discriminación por motivos de raza, ascendencia, lugar de origen, color, origen étnico, ciudadanía, religión o creencias religiosas, credo, sexo (incluyendo el embarazo y las afecciones relacionadas con este), orientación sexual, características genéticas, condición de veterano, identidad de género, expresión de género, edad, estado civil, estatus familiar, discapacidad, o cualquier otro aspecto protegido por la ley vigente.

Nuestra prioridad es eliminar las barreras para garantizar la igualdad de acceso al empleo. Un representante de Recursos Humanos trabajará con los solicitantes que requieran una adaptación razonable durante el proceso de solicitud. Toda la información que se haya compartido durante el proceso de solicitud de adaptación se almacenará y utilizará de manera congruente con las leyes y las políticas de Manulife/John Hancock correspondientes. Para solicitar una adaptación razonable en el proceso de solicitud, envíenos un mensaje a [e-mail] .

Referenced Salary Location

Toronto, Ontario

Modalidades de Trabajo

Híbrido

Salary range is expected to be between

$113,000.00 CAD - $163,000.00 CAD

Los empleados también tienen la oportunidad de participar en programas de incentivos y recibir una compensación vinculada al rendimiento empresarial e individual. El salario real variará según las condiciones del mercado local, la geografía y factores relacionados con el puesto como conocimientos, habilidades, requerimientos, experiencia y educación/formación. Si solicitas este puesto fuera de tu ubicación principal, por favor escríbenos a [e-mail] para conocer el rango salarial correspondiente a tu ubicación.

Manulife ofrece a los empleados aptos una amplia variedad de beneficios personalizables, entre ellos, beneficios de salud, odontológicos, de salud mental, oftalmológicos, por discapacidad a corto y a largo plazo, cobertura de seguro de vida y por muerte accidental y desmembramiento, adopción/subrogación y bienestar, y planes de asistencia al empleado/familiar. También ofrecemos a los empleados admisibles varios planes de ahorro para la jubilación (incluidos planes de pensiones y un plan mundial de propiedad de acciones con contribuciones equivalentes del empleador) y recursos de asesoramiento y educación financiera. Nuestro generoso programa de tiempo libre remunerado en Canadá incluye feriados, vacaciones, días personales y días por enfermedad, y ofrecemos la gama completa de ausencia laboral reglamentaria. Si se está postulando para este puesto en los EE. UU., póngase en contacto con [e-mail] para obtener más información sobre las disposiciones relativas al tiempo libre remunerado específicas de EE. UU.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement (https://careers.manulife.com/global/en/talentacquisitionprivacystatement) .