Technology - Senior Architect/Architect, Cybersecurity

United States of Aritzia; Vancouver; On-site; CAD 120,000 - 190,000; Full time

Job summary

Aritzia is seeking a Senior Architect/Architect, Cybersecurity, to define secure architectures for retail, ecommerce, and cloud environments. You will create reusable patterns, lead architecture reviews, and guide security from design through implementation.

You will collaborate with business and technology teams across North America to assess risk, define proportionate security requirements, and ensure compliance with PCI DSS and industry best practices.

Qualifications

• Proven security design patterns and reference architectures.
• Experience with identity, applications, APIs, integrations, cloud platforms, data protection.
• Threat modeling and risk communication to stakeholders.
• Retail/e‑commerce security architecture experience, particularly payments.

Responsibilities

• Create practical security patterns and reference architectures for identity, apps, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access.
• Lead security architecture reviews and define proportionate security requirements and acceptance criteria.
• Design secure architectures for retail and ecommerce capabilities, including customer identity, checkout, and payments.
• Perform threat modeling to evaluate abuse scenarios, credential theft, authorization failures, and data exposure.
• Define identity architecture for human and workload identities, federation, service accounts, and secrets management.
• Guide hybrid cloud security architecture across Azure, Google Cloud, on‑prem, SaaS, and integrations.

Skills

CISSP

CCSP

SABSA

Cloud Security

Tools

Microsoft Azure

Google Cloud Platform

Hybrid Cloud

Job description

THE BUSINESS

We are Everyday Luxury™. It's what we do and how we do it - together. It's working alongside world-class talent in pursuit of world-class results. It's maximizing your potential in a high-performance culture. It's knowing that wherever you are, you belong. It's elevating your world - and the world of those who love and will love Aritzia. It's You. And an endless runway of opportunity.

With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America - including Toronto, New York, Los Angeles and Seattle - our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best - with us.

THE TEAM

The mission of the Cybersecurity Department is to deliver high‐quality cybersecurity services and solutions that minimize risk across Aritzia's systems and data.

THE OPPORTUNITY

Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing, engineering, and enabling secure technology solutions that protect Aritzia's systems and data, reduce cybersecurity risk, and enable the business to operate and innovate securely. As the Senior Architect/Architect, Cybersecurity, you will define secure architectures, reusable security patterns, and reference architectures across Aritzia's retail, eCommerce, enterprise, cloud, SaaS, and integration environments. You will partner with business and technology teams to evaluate risk, establish proportionate security requirements, and guide solutions from early design through implementation and assurance. With your valuable contribution to the business in this role, the opportunities are endless, from a rewarding career in Cybersecurity to continued growth and development with Aritzia.

THE ROLE

• Create practical, reusable security patterns and reference architectures for identity, applications, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access.
• Lead security architecture reviews for proposed and changing solutions, identify trust boundaries and threats, and define clear, proportionate, implementable security requirements and acceptance criteria.
• Design secure architectures for retail and e-commerce capabilities, including customer identity, mobile and web applications, checkout, payment integrations, point-of-sale environments, commerce platforms, and third-party services.
• Perform threat modeling to evaluate abuse scenarios, credential theft, authorization failures, data exposure, integration compromise, and attack paths across connected systems.
• Define identity architecture for human and workload identities, federation, service accounts, privileged access, least privilege, secrets, and credential lifecycle management.
• Guide consistent hybrid cloud security architecture across Microsoft Azure, Google Cloud Platform, on-premises platforms, SaaS services, and supporting integrations.
• Architect secure AI adoption by defining trust boundaries and control patterns for agents, MCP servers, retrieval systems, external inference services, tool execution, sensitive data access, human approval, and auditability.
• Define architecture‑specific detection and response requirements, including required telemetry, logging, retention, correlation, alerting, and response capabilities.
• Translate PCI DSS and other applicable compliance requirements into architecture decisions, control requirements, and evidence expectations.
• Document architecture decisions and exceptions, including trade‑offs, residual risks, compensating controls, accountable owners, and review dates.
• Drive adoption of approved security patterns and reduce avoidable design variation, recurring control gaps, and implementation ambiguity.
• Communicate architecture risks, decisions, and requirements clearly to technical teams, business stakeholders, governance forums, and leaders.

THE QUALIFICATIONS

• Proven skills, certifications, education, and/or experience: CISSP, CCSP, SABSA Chartered Security Architect, or equivalent cloud and security architecture certifications from Microsoft Azure, Google Cloud, or other recognized providers.
• Demonstrated experience creating secure design patterns and reference architectures that technology teams adopted in practice.
• Strong knowledge of application and API security, identity architecture, cloud architecture, network segmentation, privileged access, integration security, and data protection.
• Experience performing threat modeling, identifying trust boundaries and attack paths, and communicating risk to technical and business stakeholders.
• Experience with Microsoft Azure, Google Cloud Platform, on-premises, SaaS, and hybrid cloud architecture.
• Experience with retail and/or e-commerce security architecture, particularly payments