We are seeking an experienced Cyber Security Solutions Architect to provide security architecture, technology risk, and cyber security advisory services across cloud and on-premises environments. This role is responsible for assessing security risks, designing secure solutions, developing security standards, supporting DevSecOps practices, and ensuring technology solutions align with industry best practices and organizational security objectives.
Key Responsibilities
Assess current and target-state technology architectures to identify security risks and control gaps.
Design and recommend secure architecture solutions for cloud and on-premises environments.
Develop and maintain security standards, policies, reference architectures, and secure design patterns.
Support secure software development practices, including DevSecOps, secure SDLC, and application security.
Conduct threat modeling and security risk assessments for applications, infrastructure, and emerging technologies.
Contribute to vulnerability management activities, including risk assessment, prioritization, and remediation guidance.
Advise on security testing methodologies, including code scanning and application security assessments.
Evaluate security considerations related to emerging technologies, including AI-enabled solutions.
Translate technical security findings into business-focused recommendations and reports.
Collaborate with cross-functional teams to promote security best practices and provide technical guidance.
Qualifications
Degree or diploma in Computer Science, Information Technology, Cyber Security, or a related field.
5+ years of experience in information technology or cyber security.
3+ years of experience in cyber security architecture, security engineering, or a similar role.
Experience designing secure cloud and on-premises architectures.
Strong knowledge of security controls, risk management, vulnerability management, and security governance.
Experience with DevSecOps, secure SDLC, and application security practices.
Familiarity with industry security frameworks such as NIST, ISO 27001, or similar.
Knowledge of enterprise architecture frameworks is considered an asset.
Relevant industry certifications (e.G., CISSP, CCSP, CISM, AWS or Azure Security) are an asset.
