Senior Security Architect - Toronto

Randstad Canada; Toronto; Hybrid; CAD 140,000 - 190,000; Full time

Job summary

Randstad Canada is seeking an experienced Senior Security Architect in Toronto to drive strategic and hands-on cyber security initiatives. You will mature CSIRT capabilities, lead incident response coordination, and guide Zero Trust implementation across IAM and network security domains.

This role blends governance with technical execution in a hybrid setup (up to 3 days on site). You will work with Entra ID, Defender, Sentinel, and AWS GuardDuty, shaping incident playbooks, executive briefings,

Qualifications

• 7–10+ years in cyber security with CSIRT/SOC background.
• Proven incident lifecycle leadership and cross-functional coordination.
• Experience authoring executive briefings and incident reports.
• Hands-on Zero Trust delivery and security gap analyses.
• Deep knowledge of IAM controls including MFA, CA, RBAC, PAM/PIM, Entra ID.

Responsibilities

• Govern CSIRT program maturity and incident response policies.
• Coordinate incidents and deliver executive SITREPs and post-incident reviews.
• Lead or support Zero Trust implementations and architecture assessments.
• Implement IAM controls across Entra ID environments.
• Translate ZTNA principles into network segmentation and secure access models.
• Define KPIs and collaborate with security ops and cloud teams.

Skills

CSIRT/SOC experience

Incident response leadership

Executive communications

Zero Trust delivery

IAM controls

ZTNA concepts

Tools

Entra ID

Defender

Sentinel

GuardDuty

PAM/PIM

Job description

We are seeking an experienced Senior Security Architect to support both strategic and operational cyber security initiatives across enterprise environments. In this dual-focused role, you will mature Cyber Security Incident Response Team (CSIRT) capabilities and drive the hands‑on implementation of Zero Trust architecture. You will be responsible for leading incident response coordination, authoring executive briefings, refining incident playbooks, and closing critical security gaps across Identity and Access Management (IAM) and network security domains.

Location: Toronto, ON (Hybrid – Up to 3 days/week onsite)

Duration: 8-month contract.

Advantages

• Dual Strategic & Hands-On Scope: Drive high-visibility Zero Trust implementations while managing active incident response workflows.
• Advanced Identity & Cloud Stack: Work extensively with Microsoft Entra ID, Conditional Access, PAM/PIM, Defender, Sentinel, and AWS GuardDuty.
• AI Threat Landscape Alignment: Direct incident readiness and containment playbooks tailored to counter AI-driven and machine-speed attack vectors.
• Flexible Hybrid Model: Balance remote work with collaboration in Toronto up to 3 days per week.

Responsibilities

• CSIRT Governance & Program Maturity: Review, update, and standardize incident response policies, playbooks, procedures, and workflows in alignment with industry frameworks such as NIST CSF and ISO 27001.
• Incident Coordination & Executive Reporting: Lead and coordinate cross-functional responses to active cyber security incidents, authoring executive briefings, status reports (SITREPs), post-incident reviews, and communication materials for internal and external stakeholders.
• Hands‑On Zero Trust Implementation: Conduct current‑state security architecture assessments, identify control gaps, and directly lead or support the configuration and operationalization of Zero Trust technologies.
• Identity & Access Management (IAM) Controls: Implement and optimize identity‑focused security controls, including Multi-Factor Authentication (MFA), Conditional Access policies, Role‑Based Access Control (RBAC), Privileged Access Management (PAM/PIM), and Entra ID environments.
• Network & Micro‑Segmentation Architecture: Translate Zero Trust Network Access (ZTNA) principles into operational controls, including network micro‑segmentation, secure access models, and perimeter defense strategies.
• Incident Readiness for AI-Driven Threats: Support the evolution of incident response playbooks to defend against AI-accelerated threats, automated attack vectors, and machine-speed exploitation.
• Cross‑Functional Collaboration & Metrics: Define key performance indicators (KPIs), facilitate tabletop exercises, and partner with security operations, cloud engineering, and technical leads to embed security controls into day‑to‑day operations.

Qualifications

• Cyber Security Seniority: 7–10+ years of dedicated experience in cyber security, with a strong background in CSIRT and Security Operations Center (SOC) environments (Strictly Required).
• Incident Response Leadership: Proven experience coordinating and managing cyber incidents, leading the full incident lifecycle (triage, containment, recovery, post‑incident reviews) and managing cross‑functional stakeholder communications (Strictly Required).
• Incident Communication & Governance: Demonstrated success authoring executive briefings, incident reports, and developing incident response playbooks, policies, and standards (Strictly Required).
• Hands‑On Zero Trust Delivery: Proven hands‑on experience implementing Zero Trust technologies, conducting security gap analyses, and operationalizing Zero Trust models (Strictly Required).
• Identity & Network Security Controls: Direct expertise with identity security controls (MFA, Conditional Access, RBAC, PAM/PIM, Entra ID) and Zero Trust network principles (segmentation, ZTNA) (Strictly Required).

Nice-to-Have Assets

• Prior cyber security experience within a public sector environment.
• Professional certifications such as CISSP, CISM, GIAC, or Azure Security Engineer.
• Familiarity with healthcare data privacy frameworks (e.g., PHIPA) or SOAR (Security Orchestration Automation and Response) platforms.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [e-mail] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.