We are Canada's largest independent information technology services firm, and after 45 years, we're still growing! Join us as a "Senior Cloud Security Architect" in our Insurance Team.

This role is hybrid and requires you to be at Markham at a minimum 3 days per week - subject to change at any time.

Your future duties and responsibilities

• Design and implement secure AWS multi-account architectures using Control Tower, SCPs, and IAM best practices.
• Develop security governance aligned with CIS, NIST, and ISO frameworks.
• Implement encryption, key management, and threat detection using AWS KMS, GuardDuty, Security Hub, and Macie.
• Architect secure network designs with AWS WAF, Shield, and VPC segmentation.
• Embed security in IaC templates (Terraform, CloudFormation) and automate incident response workflows.
• Conduct risk assessments, threat modeling, and posture management for AWS workloads.
• Collaborate with cross-functional teams and mentor engineers on cloud security best practices.

Required qualifications to be successful in this role

• AWS Cloud Security Architecture (4+ years): Design and implement secure, compliant multi-account AWS environments.
• Cybersecurity (8+ years): Enterprise security architecture, governance, and compliance across cloud and hybrid infrastructures.
• Secure Landing Zones: AWS Control Tower, Organizations, SCPs.
• Identity & Access Management: AWS IAM, SSO, STS, Okta, Azure AD integration.
• Encryption & Key Management: AWS KMS, CloudHSM, Secrets Manager.
• Threat Detection & Monitoring: Security Hub, GuardDuty, Macie, Inspector, CloudTrail, AWS Config.
• Network Security: AWS WAF, Shield, Network Firewall, VPC segmentation.
• Compliance & Governance: CIS Benchmarks, Audit Manager, Trusted Advisor.
• Infrastructure as Code: Security templates in Terraform, CloudFormation, CDK.
• Incident Response & Automation: AWS Lambda, Step Functions, EventBridge.
• Data Protection: S3 Object Lock, Access Points, Macie.
• Risk & Threat Modeling: Architecture reviews for AWS workloads.
• Monitoring & Metrics: CloudWatch, SIEM/SOAR integrations.

Professional Skills

• Strong governance and compliance mindset.
• Excellent communication and collaboration skills.
• Leadership in security architecture and mentoring.

Nice-to-Have

• AWS Security Specialty, CISSP, CISM certifications.
• Multi-cloud security (Azure/GCP).
• Container security (ECS, EKS, Lambda).
• DevSecOps integration and automation tools (Ansible, Python).
• Familiarity with Zero Trust principles.

Education & Experience

• Bachelor’s in Computer Science, Information Security, or equivalent.

• 8+ years in cybersecurity, 4+ years in AWS Cloud Security Architecture.

#LI-BN

"Use of the term ‘architect’ in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT engineering-related functions, but licensure from an engineering regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.”

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.