Senior Security Architect — Threat Modeling & Secure SDLC

Payments Canada; Ottawa; Hybrid; CAD 108,000 - 132,000; Full time

Benefits offered by this job

Hybrid work environment

Competitive compensation package

Paid time off and benefits

Job summary

Payments Canada seeks a Lead Security Architect to drive secure-by-design architectural governance across programs. You will lead threat modeling, guide risk-based decisions, and align designs with business goals.

This senior role collaborates with software engineering, security operations, and IT leadership to integrate robust security into modern applications. The position emphasizes security governance, multi-year program leadership, and mentoring staff while advancing enterprise security

Qualifications

• Undergraduate degree in Computer Science, Cybersecurity, or related field.
• Minimum seven years in IT/security with five years in security or solution architecture across multiple domains.
• Experience conducting threat modeling (STRIDE/PASTA/Mitre) and evaluating risks (OWASP Top 10).

Responsibilities

• Provide strategic security guidance to product teams and architects, setting a defensive standard.
• Lead threat modeling and knowledge-transfer sessions to embed security early in SDLC.
• Perform governance, design reviews and guidance to manage security debt.
• Mentor staff and foster continuous learning on threats and secure design practices.

Skills

Threat modeling

Security architecture

Technical leadership

Stakeholder communication

Security governance

Education

Bachelor's degree in CS or related field

Security certifications (CISSP/CISM/CSSLP)

Tools

TOGAF

SABSA

CI/CD security tooling

Job description

Payments Canada seeks a Lead Security Architect to drive secure-by-design architectural governance across programs. You will lead threat modeling, guide risk-based decisions, and align designs with business goals.

This senior role collaborates with software engineering, security operations, and IT leadership to integrate robust security into modern applications. The position emphasizes security governance, multi-year program leadership, and mentoring staff while advancing enterprise security