Senior Cybersecurity Architect - Secure Retail & Cloud

United States of Aritzia; Vancouver; On-site; CAD 120,000 - 190,000; Full time

Job summary

Aritzia is seeking a Senior Architect/Architect, Cybersecurity, to define secure architectures for retail, ecommerce, and cloud environments. You will create reusable patterns, lead architecture reviews, and guide security from design through implementation.

You will collaborate with business and technology teams across North America to assess risk, define proportionate security requirements, and ensure compliance with PCI DSS and industry best practices.

Qualifications

• Proven security design patterns and reference architectures.
• Experience with identity, applications, APIs, integrations, cloud platforms, data protection.
• Threat modeling and risk communication to stakeholders.
• Retail/e‑commerce security architecture experience, particularly payments.

Responsibilities

• Create practical security patterns and reference architectures for identity, apps, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access.
• Lead security architecture reviews and define proportionate security requirements and acceptance criteria.
• Design secure architectures for retail and ecommerce capabilities, including customer identity, checkout, and payments.
• Perform threat modeling to evaluate abuse scenarios, credential theft, authorization failures, and data exposure.
• Define identity architecture for human and workload identities, federation, service accounts, and secrets management.
• Guide hybrid cloud security architecture across Azure, Google Cloud, on‑prem, SaaS, and integrations.

Skills

CISSP

CCSP

SABSA

Cloud Security

Tools

Microsoft Azure

Google Cloud Platform

Hybrid Cloud

Job description

Aritzia is seeking a Senior Architect/Architect, Cybersecurity, to define secure architectures for retail, ecommerce, and cloud environments. You will create reusable patterns, lead architecture reviews, and guide security from design through implementation.

You will collaborate with business and technology teams across North America to assess risk, define proportionate security requirements, and ensure compliance with PCI DSS and industry best practices.