Enterprise Cybersecurity Architect

Enterprise Cybersecurity Architect – Zero Trust

Location: Remote – Anywhere in Canada

Contract Duration: 12 months, with possibility of extension

Schedule: Up to 37.5 hours/week, Monday–Friday, 8:00 AM–5:00 PM Pacific Time

About the Role

We are looking for an experienced Enterprise Cybersecurity Architect specializing in Zero Trust to support a large-scale, enterprise-wide cybersecurity transformation.

The successful candidate will provide architectural leadership, develop Zero Trust security standards and controls, and establish governance processes to strengthen security across identity, cloud, applications, networks, data, and devices.

This role requires someone who has hands-on experience designing and implementing Zero Trust architecture in a large, complex organization, along with strong security governance and framework expertise.

Key Responsibilities

• Lead and support the implementation of an enterprise-wide Zero Trust security program.
• Develop Zero Trust security architecture, policies, standards, and controls.
• Define security controls based on Zero Trust principles and industry frameworks.
• Create security architecture designs, reference architectures, and reusable design patterns.
• Establish governance processes to ensure security standards are consistently followed.
• Strengthen security controls across identity, data, applications, networks, cloud, assets, and devices.
• Work closely with IT, security, risk, compliance, and business teams.
• Evaluate security technologies and recommend improvements.

Must-Have Requirements

• 5–7+ years of progressive experience in enterprise security engineering or architecture.
• Minimum 2 years working as a Security Architect.
• Strong hands-on experience with Zero Trust architecture and implementation in a large enterprise environment.
• Deep understanding of Zero Trust principles and NIST SP 800-207.
• Experience designing and documenting security control frameworks, policies, and technical standards.
• Strong knowledge of NIST, ISO 27001, and CIS Controls.
• Experience creating security reference architectures, design patterns, and architecture diagrams.
• Experience establishing technical governance processes, architecture reviews, and security standards.
• Broad knowledge of IAM, cloud security, network security, endpoint security, application security, and data protection.

Nice-to-Have Skills

• SABSA certification – preferred.
• TOGAF certification – desirable.
• CISSP, SANS GIAC, or AWS/GCP security certifications.
• Experience implementing IAM, network security, cloud security, and endpoint/data protection technologies.
• Experience with AWS, Azure, or GCP.
• Knowledge of DLP, network segmentation, firewalls, and network access controls.
• Experience implementing secure configuration baselines across cloud, endpoint, and network environments.

Education

Degree in Computer Science, Engineering, Information Security, or a related discipline, or equivalent relevant education.

Additional Information

• Fully remote within Canada.
• Must be available to work Pacific Time business hours.
• Contractor must provide their own laptop.
• A secure virtual desktop environment will be provided.
• Opportunity to contribute to a major enterprise-wide Zero Trust cybersecurity initiative.