SENIOR SPECIALIST Cyber Architecture

City of Toronto; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

The City of Toronto is hiring a Senior Specialist in Cyber Architecture to support the CISO in executing the City’s cyber vision and goals. The role includes advising on cloud security initiatives and enhancing the cyber security posture.

Key responsibilities include designing secure cloud environments, conducting architecture reviews, and providing leadership in addressing emerging threats. Candidates should have extensive experience in security architecture, a post-secondary degree in a related discipline, and strong communication skills.

Qualifications

• Extensive experience in security architecture across enterprise applications.
• Strong understanding of cloud security frameworks and industry standards.
• Hands-on implementation experience with cloud data platforms.

Responsibilities

• Assist with the secure design and architecture of enterprise applications.
• Conduct architecture reviews and security risk assessments.
• Provide leadership in cloud security initiatives.

Skills

Cloud security frameworks

Threat modeling

Communication skills

Problem-solving skills

Cloud data platforms

Security Service Edge (SSE)

Cloud Workload Protection Platform (CWPP)

Education

Post-secondary degree in Business or Technology or a related discipline

Tools

AWS

Azure

Google Cloud

Job description

Job Title: SENIOR SPECIALIST Cyber Architecture

Closing Date: May 31, 2026 2:00 p.m. (EST)

Location: Downtown, Toronto

Affiliation: Non-Union

Consider Your Role with Aliant Resources and Our Municipal Government Client The City of Toronto.

About Us

Aliant Resources is a dedicated provider of IT staffing services, committed to promoting diversity, equity, inclusion, belonging, anti-racism, and accessibility in all facets of our operations.

Job Summary:

The Senior Specialist, Cyber Architecture will be responsible for supporting the Chief Information Security Officer (CISO) in executing the City’s cyber vision, strategy, and goals. The primary focus will be on advising and delivering technical expertise related to cloud security initiatives across the City’s divisions, agencies, and corporations.

This role will involve the development, implementation, and continuous improvement of cloud security measures, engaging with teams to enhance the cyber security posture of cloud environments.

The Security Architect provides senior-level technical leadership and subject matter expertise across cyber architecture domains, ensuring security principles are embedded into application design, cloud services, infrastructure platforms, and data ecosystems. This role partners closely with enterprise architecture, engineering, and delivery teams to ensure secure-by-design outcomes, regulatory compliance, and resilience against emerging threats.

Major Responsibilities

• Assist with the secure design and architecture of enterprise applications, cloud platforms, and infrastructure services, ensuring the protection of sensitive data and critical systems.
• Define and maintain security architecture patterns, reference architectures, and blueprints for IaaS, PaaS, SaaS, and on‑premise environments.
• Conduct architecture reviews, threat modeling, and security risk assessments for enterprise applications, infrastructure platforms, and cloud-hosted solutions.
• Provide leadership and direction in the research, design, planning, and execution of cloud security initiatives to address emerging threats and trends related to generative/Agentic AI, data usage, access governance, monitoring, and misuse, and advising stakeholders on secure and responsible adoption of AI technologies in cloud environments.
• Provide subject‑matter expertise in PCI‑DSS compliance within cloud environments, supporting PCI-DSS scoping, control validation, evidence review, and remediation guidance for cloud‑hosted payment systems and integrated third‑party services.
• Contribute to the development, maintenance, and enforcement of security policies, standards, and guidelines, aligned with industry frameworks and regulatory requirements.
• Partner with enterprise architects, infrastructure teams, application teams, and cloud engineers to embed security into planning, design, and delivery lifecycles.
• Provide mentorship, guidance, and security design expertise to technical teams, promoting best practices across application and infrastructure domains.
• Stay current with evolving threats, technologies, and architectural patterns to proactively recommend improvements to the organization’s security posture.
• Contribute to continuous improvement of the enterprise security architecture and long‑term cybersecurity roadmap.

Qualifications & Certifications

• Post‑secondary degree in Business or Technology or a related discipline.
• Extensive experience in security architecture across enterprise applications, infrastructure, and cloud environments.
• Demonstrated experience performing architecture reviews, threat modeling, and security assessments in complex environments.
• Strong understanding of cloud security frameworks, industry standards, and regulatory requirements (NIST, CSA CCM, CIS, ISO 27001, PCI‑DSS etc.).
• Hands‑on implementation experience with cloud data platforms.
• In‑depth knowledge of cloud platforms, security solutions, and services (AWS, Azure, Google Cloud, etc.).
• Solid understanding of Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), Cloud Native Application Protection Platform (CNAPP) and Cloud Workload Protection Platform (CWPP) tools; knowledge of cloud security frameworks, standards and best practices; and working with cloud IAM and IaaS, PaaS and SaaS native security capabilities.
• Proven ability to operate effectively in large, complex, enterprise environments.
• Recognized for strategic thinking, innovation, and systematic problem‑solving.
• Strong ability to influence, guide, and support teams through architectural and security changes.
• Excellent communication skills, capable of translating complex security concepts for technical and non‑technical audiences.
• Preferred Certifications (at least two in the list): CISSP, CCSP, CCSK, SABSA, TOGAF, ISO 27001 LA, GICSP, or CRISC.

Skills

• Ability to work in transformative programs.
• Ability to lead efficient communication between all project stakeholders, including internal teams and clients.
• Ability to achieve business objectives through influencing and effectively working with key stakeholders.
• Excellent written & verbal communication skills (comfortable & confident communicating at all levels including business partners, leadership and vendors.
• Excellent problem‑solving skills with capability to identify solutions to unusual and complex problems.
• Keen attention to detail and strong organizational skills.
• Highly organized, proactive, self‑motivated team player who takes initiative and is able to work independently.
• Ability to work in a fast‑paced environment managing multiple priorities with proven time‑management skills.
• Strong analytical skills and ability to prioritize and multitask.
• Ability to prioritize and effectively manage competing priorities and projects.
• Ability to manage multiple initiatives while adhering to strict deadlines.
• Able to work extremely well under pressure while maintaining a high level of professionalism.
• Self‑motivated person with desire to go above and beyond tasks.
• Transferable skills, like communication and decision‑making, are equally important.
• Being able to think on your feet and show good judgment are especially valuable in this field. “Security pros should always be ready to react to cyber‑related incidents quickly.

Diversity Statement

At Aliant Resources, we are committed to building a workforce that reflects the communities we serve and to promoting a diverse, anti‑racist, inclusive, accessible, merit‑based, respectful and equitable workplace.

Accessibility Statement

Aliant Resources is dedicated to making our recruitment process accessible to everyone with or without a disability. We adhere to workplace accessibility standards to ensure that individuals with disabilities can fully participate in employment opportunities. We understand the importance of identifying and removing barriers and we strive to provide an inclusive experience for all candidates.

Workplace Accommodations

We offer workplace accommodations throughout the recruitment process and all aspects of employment consistent with the requirements of the AODA.

If you require workplace accommodations due to a disability, injury, illness, or any other condition that may affect your ability to apply online or perform essential job functions, please reach out to us at [e-mail]. Your request will be answered and we will collaborate with you to provide appropriate workplace accommodations as appropriate.