Security Architect – Cybersecurity & Zero Trust
Location: Toronto, ON (Hybrid – up to 3 days onsite)
Experience: 7–10+ years
Engagement: Contract
Job Description
We are seeking an experienced Security Architect with strong expertise in Cyber Security Incident Response (CSIRT/SOC) and hands-on Zero Trust implementation. The successful candidate will strengthen incident response capabilities, improve security governance, and implement practical identity and network security controls across the enterprise.
Key Responsibilities
- Coordinate and manage cybersecurity incidents, including triage, containment, recovery, stakeholder communication, and post-incident reviews.
- Develop and enhance incident response policies, procedures, playbooks, standards, and governance processes.
- Prepare incident reports, executive briefings, status updates, and communications for internal and external stakeholders.
- Conduct security assessments and identify gaps in identity, access management, and network security.
- Implement and operationalize Zero Trust controls, including MFA, Conditional Access, privileged access management, and identity governance.
- Collaborate with security, infrastructure, and operational teams to integrate identity, endpoint, and network security solutions.
- Establish incident response metrics, support tabletop exercises, and drive continuous program improvement.
- Align security initiatives with emerging AI-driven cyber threats and evolving risk mitigation priorities.
- Maintain technical documentation and facilitate knowledge transfer to internal teams.
Required Qualifications
- 7–10+ years of cybersecurity experience, with strong exposure to CSIRT/SOC and incident response coordination.
- Proven experience managing cybersecurity incidents and communicating with internal and external stakeholders.
- Hands-on experience implementing Zero Trust technologies, particularly Identity and Access Management (IAM).
- Strong knowledge of Microsoft Entra ID, MFA, Conditional Access, RBAC, PAM/PIM, and identity governance.
- Understanding of network security, segmentation, secure access models, and Zero Trust Network Access (ZTNA).
- Experience with Microsoft security tools such as Defender and Sentinel, and AWS security services such as GuardDuty and Security Hub.
- Experience developing security policies, incident response playbooks, executive reports, and operational procedures.
- Excellent communication, stakeholder management, analytical, and problem-solving skills.
- Awareness of AI-driven cyber threats and their implications for incident response and security operations.
Nice to Have
- Experience in healthcare or public sector environments, preferably the Ontario health sector.
- Familiarity with NIST CSF, ISO 27001, and PHIPA.
- Relevant certifications such as CISSP, CISM, GIAC, or Azure Security Engineer.
Work Arrangement: Hybrid, with onsite attendance determined by the hiring manager. The resource must be based in Ontario for access to agency systems unless prior written approval is obtained.
- Interested candidates are encouraged to apply with their updated resumes.
