Solution Architect -Security & API Infrastructure

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!

Toronto

Hybrid

CAD 140,000 - 180,000

Full time

11 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Astra-North Infoteck Inc. in Toronto, ON is seeking a Solution Architect (Security & API Infrastructure) for a hybrid role.

You will lead end-to-end architecture across security, API, and cloud domains, delivering artifacts like HLD/LLD and threat models, while ensuring regulatory compliance in financial services. Ideal candidates have 8+ years in solution/technical architecture, 5+ years in security architecture, and hands-on Apigee/API management experience.

Qualifications

8+ years in Solution or Technical Architecture.
5+ years focused on Security Architecture.
Hands-on experience with Apigee API Management, API Proxy Development, Shared Flows, Target Servers, Analytics.

Responsibilities

Lead end-to-end solution architecture across security, API, and cloud domains.
Gather requirements and define solution architecture from design through implementation and operational handover.
Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.).
Produce architecture artifacts including High-Level Design (HLD), Low-Level Design (LLD), Data Flow Diagrams, Sequence Diagrams, Threat Models.
Evaluate emerging technologies through POCs and vendor assessments.
Design enterprise security architectures including Encryption at Rest/Transit/In Use, Key Management, PKI, and certificate lifecycle management.
Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms.
Define security policies for API Gateways, WAF, DDoS Protection, Bot Management.
Conduct Threat Modeling, Security Reviews, Risk Assessments.
Ensure compliance with PCI-DSS, SOX, GDPR, Open Banking.
Design enterprise API strategies using Apigee: API Proxy Design, Shared Flows, Target Servers, Developer Portals, Analytics, OAuth/OIDC, Rate Limiting, API Monetization.
Architect edge security solutions using Akamai and Cloudflare.
Configure WAF Rules, Bot Manager, DDoS Protection, Edge Compute, DNS Management.
Design enterprise DNS architecture including DNSSEC, Traffic Management, Failover, Multi-CDN Strategies, GSLB, TTL Strategies.
Design secure AWS cloud solutions: VPC, IAM, KMS, CloudFront, Route 53, GuardDuty, Security Hub, AWS WAF/Shield, Lambda, ECS/EKS, API Gateway.
Implement cloud-native security: Zero Trust, Least Privilege IAM, Secrets Management, IaC Security.
Design hybrid and multi-cloud connectivity architectures.
Participate in Architecture Review Boards and mentor teams.

Skills

Solution Architecture

Security Architecture

API Infrastructure

Apigee API Management

AWS Cloud Architecture

Akamai

Cloudflare

Enterprise Security

Financial Services

Tools

Apigee API Management

API Proxy Development

Shared Flows

Target Servers

Analytics

OAuth/OIDC

Rate Limiting

API Monetization

Akamai

Cloudflare

WAF Rules

Bot Manager

DDoS Protection

Edge Compute

DNS Management

DNSSEC

Traffic Management

Failover

GSLB

TTL Strategies

VPC

IAM

KMS

GuardDuty

Security Hub

AWS WAF

AWS Shield

Lambda

ECS/EKS

API Gateway

Job description

Apigee API Management
Design enterprise API strategies using Apigee including:
- API Proxy Design
- Shared Flows
- Target Servers
- Developer Portals
- Analytics
- OAuth/OIDC
- Rate Limiting
- API Monetization

Job Title

Solution Architect (Security & API Infrastructure)

Location

Toronto, Ontario (Hybrid – 4 Days Work From Office)

Duration

6–12 Months

Required Experience

8+ Years (5+ Years in Security Architecture)

Primary Skills

Solution Architecture
Security Architecture
API Infrastructure
Apigee API Management
AWS Cloud Architecture
Akamai
Cloudflare
Enterprise Security
Financial Services

Role Description

1. Architecture & Solution Design

Lead end-to-end solution architecture across security, API, and cloud domains.
Gather requirements and define solution architecture from design through implementation and operational handover.
Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.).
Produce architecture artifacts including:
- High-Level Design (HLD)
- Low-Level Design (LLD)
- Data Flow Diagrams
- Sequence Diagrams
- Threat Models
Evaluate emerging technologies through Proof of Concepts (POCs) and vendor assessments.

2. Security Architecture

Design enterprise security architectures covering:
- Encryption at Rest
- Encryption in Transit
- Encryption in Use
- Key Management
- Certificate Lifecycle Management
- Public Key Infrastructure (PKI)
Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms.
Define security policies for:
- API Gateways
- Web Application Firewalls (WAF)
- DDoS Protection
- Bot Management
Conduct:
- Threat Modeling
- Security Reviews
- Risk Assessments
Ensure compliance with financial industry standards including:
- PCI-DSS
- SOX
- GDPR
- Open Banking

3. API & Edge Infrastructure

Design enterprise API strategies using Apigee including:
- API Proxy Design
- Shared Flows
- Target Servers
- Developer Portals
- Analytics
- OAuth/OIDC
- Rate Limiting
- API Monetization
Architect edge security solutions using:
- Akamai
- Cloudflare
Configure:
- WAF Rules
- Bot Manager
- DDoS Protection
- Edge Compute
- DNS Management
Design enterprise DNS architecture including:
- DNSSEC
- Traffic Management
- Failover
- Multi-CDN Strategies
- GSLB
- TTL Strategies

4. Cloud & Infrastructure

Design secure AWS cloud solutions utilizing:
- VPC
- IAM
- KMS
- CloudFront
- Route 53
- GuardDuty
- Security Hub
- AWS WAF
- AWS Shield
- Lambda
- ECS/EKS
- API Gateway
Implement cloud-native security principles:
- Zero Trust Networking
- Least Privilege IAM
- Secrets Management
- Infrastructure-as-Code Security
Design hybrid and multi-cloud connectivity architectures.

5. Governance & Leadership

Participate in Architecture Review Boards (ARBs) and Design Authority forums.
Define enterprise architecture standards and governance.
Mentor development teams on architecture and security best practices.
Collaborate with:
- Enterprise Architects
- Engineering Teams
- Product Owners
- Third-party Vendors
Maintain architecture documentation and enterprise architecture repositories.

Required Experience

Core Technical Expertise

8+ years in Solution or Technical Architecture.
5+ years focused on Security Architecture.
Hands-on experience with:
- Apigee API Management
- API Proxy Development
- Shared Flows
- Target Servers
- Analytics
Strong expertise with:
- Akamai (Property Manager, WAF/KSD, Bot Manager, Edge DNS)
- Cloudflare (WAF, Workers, DNS)
Deep understanding of:
- TLS 1.2 / TLS 1.3
- AES-256
- RSA
- Elliptic Curve Cryptography
- HSM
- Tokenization
Enterprise DNS architecture experience.
Practical experience with ThreatMetrix or similar fraud prevention platforms.
Strong AWS architecture experience (AWS Solutions Architect Professional preferred).

Domain & Governance Experience

Financial Services experience is mandatory:
- Banking
- Payments
- Insurance
- Capital Markets
Experience with:
- Architecture Governance
- Technical Debt Management
- Architecture Review Boards (ARBs)
- Enterprise Standards
Knowledge of compliance frameworks:
- PCI-DSS
- SOX
- FCA
- PSD2
- Open Banking

Architecture Practices

Experience across the complete solution lifecycle:
- Discovery
- Design
- Build
- Test
- Deploy
- Operate
Familiarity with architecture frameworks:
- TOGAF
- C4 Model
- arc42
Experience using:
- Lucidchart
- Draw.io
Strong understanding of:
- DevSecOps
- CI/CD Pipelines
- Terraform
- AWS CloudFormation
Experience with:
- Microservices
- Event-Driven Architecture
- REST APIs
- GraphQL
- Messaging & Streaming

Desirable Skills

Microsoft Azure
Google Cloud Platform (GCP)
Okta
Ping Identity
Splunk
Microsoft Sentinel
SIEM/SOAR Platforms
Container Security

Soft Skills

Excellent stakeholder communication.
Ability to present complex technical concepts to executive and non-technical audiences.
Strong analytical and problem-solving skills.
Ability to work in fast-paced, highly regulated environments.
Collaborative leadership with experience influencing cross-functional teams.

Preferred ATS Keywords