Senior Security Architect

Security Architect – Senior (Cyber Security)

• Term: November 30, 2026 – August 10, 2027
• Allocation: 100% | Duration: 175 business days
• Location: University Avenue, Toronto, Ontario
• Work Arrangement: Hybrid, up to 3 days onsite per week, subject to hiring manager discretion
• Incorp Rate: $87-$96.28

Position Overview

Our client is seeking a Senior Security Architect to support the Director, Cyber Security Defence & Resilience, in strengthening cyber security incident response and implementing Zero Trust security controls across the organization and broader health sector.

The role focuses on two key areas: Cyber Security Incident Response (CSIRT), including incident coordination, program maturity, governance, and stakeholder communications; and Zero Trust Implementation, including hands-on delivery of identity, access, and network security controls.

The successful candidate will contribute to AI-Driven Risk Program by improving incident readiness and implementing practical, measurable security solutions. This is a delivery-focused role requiring operational experience, not solely strategy or architecture design.

Key Responsibilities

Cyber Security Incident Response

• Coordinate cyber incidents across internal teams and external stakeholders, supporting triage, containment, recovery, and post-incident reviews.
• Develop and improve incident response policies, procedures, playbooks, standards, governance, and escalation processes.
• Prepare incident reports, executive briefings, and stakeholder communications.
• Define program KPIs, support tabletop exercises, and drive continuous improvement.
• Strengthen response readiness for AI-driven and machine-speed cyber threats.

Zero Trust Implementation

• Assess security architecture and identify gaps in identity, access, endpoint, and network security.
• Implement and operationalize Zero Trust controls, particularly MFA, Conditional Access, RBAC, PAM/PIM, identity governance, and Microsoft Entra ID.
• Support network segmentation, secure access models, and Zero Trust Network Access (ZTNA).
• Collaborate with security and technical teams to integrate solutions into daily operations.
• Align implementation with broader security priorities, including legacy modernization, external access protection, and vulnerability remediation.

Mandatory Qualifications and Experience

Candidates must demonstrate the following qualifications and experience.

Cyber Security Incident Response

• 7–10 years of experience in cyber security, including substantial hands-on experience in Security Operations Centre (SOC) or Cyber Security Incident Response Team (CSIRT) environments.
• Demonstrated experience coordinating and managing cyber security incidents, rather than solely participating in incident response activities.
• Practical experience across the incident response lifecycle, including triage, coordination, containment, recovery, escalation, and post-incident reviews.
• Experience coordinating response activities across internal teams and external stakeholders.
• Proven ability to develop and improve incident response policies, procedures, playbooks, standards, and governance processes.
• Strong written and verbal communication skills, including preparation of incident reports, executive briefings, and stakeholder communications.

Zero Trust Implementation and Architecture

• Demonstrated hands-on experience implementing and operationalizing Zero Trust technologies; strategy or architecture design experience alone is insufficient.
• Strong experience with identity and access management as a core component of Zero Trust.
• Practical experience with identity security controls, including MFA, Conditional Access, RBAC, privileged access controls (PAM/PIM), and Microsoft Entra ID.
• Ability to assess existing security environments, identify architecture and control gaps, and implement practical remediation measures.
• Experience translating Zero Trust principles into operational controls, integrated security solutions, and measurable outcomes.
• Working knowledge of network security principles supporting Zero Trust, including segmentation, secure access models, and ZTNA.

Security Platforms and Technical Knowledge

• Experience working with the Microsoft security ecosystem, including relevant technologies such as Microsoft Defender, Microsoft Sentinel, and Microsoft Entra ID.
• Experience with cloud security environments and familiarity with AWS security services, such as Amazon GuardDuty and AWS Security Hub.
• Solid understanding of modern cyber threats, attack vectors, and the incident response lifecycle, aligned with NIST or equivalent industry practices.
• Working awareness of AI-driven and adversarial-AI threats and their implications for incident response, detection, containment, and Zero Trust priorities.

Communication and Delivery

• Excellent stakeholder management and communication skills, including the ability to communicate effectively with executives, technical teams, and external partners.
• Ability to operate effectively in high-pressure incident environments.
• Demonstrated analytical thinking, structured problem-solving, and sound security judgment.
• Strong focus on execution, collaboration, and delivery of measurable results.

Preferred Qualifications

• Healthcare or public-sector experience, preferably within Ontario.
• Familiarity with PHIPA, NIST Cybersecurity Framework, and ISO 27001.
• Experience with cloud security, SOAR, identity governance, Zero Trust assessments, and micro-segmentation.
• Knowledge of attack-surface reduction, Continuous Threat Exposure Management (CTEM), and AI-enabled detection.
• Relevant certifications, such as CISSP, CISM, GIAC, or Microsoft Azure Security Engineer Associate.