Senior Infrastructure Security Architect

Kepler-Communications; Toronto; Hybrid; CAD 114,000 - 164,000; Full time

Benefits offered by this job

Equity plan

Health/dental/vision insurance

Unlimited vacation

Parental leave policy

Holiday shutdown

Relocation packages

Professional development fund

Office kitchen snacks

Company events

Great Place to Work

Job summary

Kepler Communications is seeking a Senior Infrastructure Security Specialist to protect our corporate, cloud, and operational infrastructure. You will own vulnerability management, security monitoring, endpoint protection, system hardening, and incident response, collaborating with IT, Engineering, and Operations.

This Toronto-based role is hybrid with about 40% on-site time. You will work with regulated and Government of Canada environments, engage in security controls, and help secure

Qualifications

• Seven or more years of cybersecurity experience in infrastructure security, security engineering, or security operations.
• Strong knowledge of Windows, Linux, networking, cloud platforms, and enterprise IT security.
• Strong hands-on experience administering and operating vulnerability management, SIEM/security monitoring, and EDR/XDR technologies.
• Experience investigating and responding to cybersecurity incidents.
• Knowledge of network security, infrastructure hardening, identity and access management, privileged access, and least-privilege principles.
• Experience securing AWS and/or Microsoft Azure environments.
• Familiarity with NIST CSF, NIST SP 800-171, NIST SP 800-53, and CIS Controls and Benchmarks.

Responsibilities

• Provide security expertise for infrastructure, cloud environments, networks, systems, databases, and identity technologies.
• Review architectures and infrastructure changes to identify risks and recommend practical controls.
• Develop secure configuration and hardening standards based on CIS Benchmarks, NIST guidance, and industry best practices.
• Support network security controls, including firewalls, segmentation, secure remote access, and intrusion detection and prevention.
• Partner with IT and Engineering to incorporate security into infrastructure design and operations.
• Own Kepler’s infrastructure vulnerability management program.
• Manage authenticated scanning, validate coverage, assess findings, and prioritize remediation based on risk.
• Coordinate remediation with system owners and track vulnerabilities through resolution or approved risk acceptance.
• Measure vulnerability exposure, remediation performance, scanning coverage, and exceptions.
• Administer platforms such as Tenable or equivalent technologies.
• Own and improve Kepler’s SIEM, security monitoring, and EDR/XDR capabilities.
• Integrate log sources and develop detection use cases across infrastructure, cloud, applications, identity, and security tools.
• Monitor logging coverage, platform health, and detection effectiveness.
• Investigate security alerts and support containment, remediation, and recovery.
• Coordinate investigations and service improvements with Kepler’s MDR/SOC provider.
• Administer platforms such as Securonix, SentinelOne, or comparable technologies.
• Support incident investigations involving infrastructure, endpoints, networks, identity, and cloud environments.
• Analyze security telemetry, collect evidence, and coordinate containment and recovery.
• Assess and improve security controls within AWS and/or Microsoft Azure.
• Identify opportunities to automate monitoring, vulnerability management, and security operations using scripts, APIs, and security tools.
• Implement technical controls for Government of Canada and other regulated environments.
• Support audits, security assessments, inspections, certifications, and remediation activities.
• Maintain documentation and evidence demonstrating that required security controls are operating effectively.

Skills

Infrastructure security

Windows/Linux

Cloud platforms

SIEM/EDR/XDR

Incident response

Network security

IAM & least privilege

Communication skills

Tools

Tenable

Securonix

SentinelOne

AWS

Azure

Job description

Kepler Communications is seeking a Senior Infrastructure Security Specialist to protect our corporate, cloud, and operational infrastructure. You will own vulnerability management, security monitoring, endpoint protection, system hardening, and incident response, collaborating with IT, Engineering, and Operations.

This Toronto-based role is hybrid with about 40% on-site time. You will work with regulated and Government of Canada environments, engage in security controls, and help secure