Senior Security Architect

Description:

Stafingo is seeking an experienced Senior Security Architect to support a major enterprise technology environment in Ontario.

The successful candidate will join a security architecture function responsible for reviewing and assessing technology solutions before implementation and production deployment. The role will focus on ensuring that proposed architectures meet established security standards, enterprise security patterns, cloud architecture principles, and risk-management requirements.

This is a highly technical and consultative position suited to a senior security professional who can independently assess complex cloud and on-premises architectures, identify security gaps and vulnerabilities, develop practical remediation strategies, and communicate recommendations effectively to both technical teams and senior leadership.

The resource will work across multiple initiatives simultaneously and will have significant interaction with architects, project teams, technology specialists, business stakeholders, and senior management.

Key Responsibilities :

Security Architecture & Solution Assessment

Conduct comprehensive security architecture reviews of proposed applications, platforms, infrastructure, and technology solutions.
Assess solution designs against established enterprise security standards, architecture patterns, policies, and control requirements.
Identify security architecture gaps, deviations, vulnerabilities, and potential attack vectors.
Develop practical recommendations and mitigation strategies to strengthen the overall security posture of proposed solutions.
Review architectures throughout the project lifecycle, from initial design through implementation and production readiness.
Evaluate the appropriate security architecture and technology placement for different cloud service and deployment models.
Provide guidance on secure integration between cloud-based and on-premises environments.
Support architecture decisions by identifying security implications, risks, dependencies, and trade-offs.
Cloud & Enterprise Security

Develop and contribute to cloud security architecture standards, patterns, reference architectures, and design guidelines.
Advise project teams on appropriate security controls for cloud platforms and services.
Evaluate security controls across public/private cloud, hybrid, and traditional data-centre environments.
Assess identity, access, network, data, application, infrastructure, and platform security controls.
Help establish secure target-state architectures while reducing redundant, inconsistent, or siloed security solutions.
Recommend improvements aligned with recognized security frameworks, standards, and industry best practices.
Threat & Risk Analysis

Apply threat-modeling methodologies to applications, integrations, infrastructure, and enterprise systems.
Identify threats, vulnerabilities, attack vectors, trust boundaries, and potential security weaknesses.
Develop and review data-flow diagrams and architecture documentation to support threat analysis.
Apply methodologies and frameworks such as STRIDE, PASTA, and MITRE ATT&CK where appropriate.
Evaluate risks associated with application development, testing, QA, deployment, and operational environments.
Recommend security safeguards and compensating controls based on identified risks.
Security Technology Assessment

Provide architecture guidance across a broad range of security technologies and capabilities, including:
Identity and Access Management (IAM)
Authentication and authorization
Role-Based Access Control (RBAC)
Privileged access
PKI and certificates
Network security
Firewalls
IDS/IPS
Secure communications
LAN/WAN security
Internet protocols and applications
Operating system security
Endpoint and malware protection
Application security
Data protection
Cloud security controls
Infrastructure security
Governance, Standards & Documentation

Develop and maintain security reference architectures, standards, patterns, diagrams, and implementation guidelines.
Contribute to enterprise security architecture documentation and reusable design patterns.
Review project deliverables for compliance with approved security requirements.
Identify and escalate security architecture issues that could affect project delivery or production readiness.
Prepare technical assessments, architecture recommendations, decision documents, and executive-level reports.
Maintain clear documentation of findings, risks, decisions, recommendations, and remediation activities.
Stakeholder & Advisory Leadership

Act as a senior subject-matter expert and trusted security advisor to project and technology teams.
Work collaboratively with enterprise architects, solution architects, infrastructure teams, application teams, cloud specialists, cybersecurity teams, and business stakeholders.
Explain complex security architecture concepts in a clear and practical manner to technical and non-technical audiences.
Present architecture assessments, risks, recommendations, and status updates to senior leadership.
Manage multiple security architecture assessments and related initiatives concurrently.
Establish productive and sustainable relationships with internal teams, partners, vendors, and stakeholders.
Work independently while aligning priorities and deliverables with organizational direction.

Required Qualifications :

10+ years of professional experience in IT security, including security principles, practices, technologies, programs, controls, and procedures.
Strong hands-on understanding of cloud security architecture and security controls.
Demonstrated experience assessing complex enterprise technology architectures.
Strong knowledge of both cloud and on-premises security architecture.
Experience identifying security gaps and recommending architecture improvements and risk mitigations.
Strong understanding of security threats, vulnerabilities, safeguards, and secure design principles.
Excellent written and verbal communication skills.
Demonstrated ability to prepare technical and executive-level documentation and presentations.
Ability to work independently with limited supervision and manage multiple priorities.
Strong collaboration and relationship-building skills.