Enterprise Security Architect - Senior Security Engineer

Job summary

Define enterprise security architecture, strategy, standards, and governance, and embed security-by-design across major projects and transformation programs. Secure cloud, identity, application, API, and data environments while managing cyber risk and supporting regulatory compliance.

Job details

Job Title: Enterprise Security Architect - Senior Security Engineer Location: Toronto, ON Hybrid Job Type: Full-Time Permanent Total Experience: 10 & Above years Key Responsibilities: Enterprise Security Architecture: Define and maintain the enterprise cybersecurity architecture roadmap aligned with business and technology strategy. Develop security reference architectures, standards, patterns, and blueprints across the enterprise. Ensure security-by-design principles are embedded into technology initiatives and transformation programs. Lead architecture reviews and provide security governance for major projects and strategic initiatives. Establish target-state security architecture for hybrid cloud, digital banking, API ecosystems, AI platforms, and data environments. Cybersecurity Strategy Governance: Develop long-term cybersecurity strategy and investment roadmap. Partner with Technology, Risk, Compliance, Audit, and Business stakeholders to manage cyber risk. Establish security architecture governance processes and architecture review boards. Develop security policies, standards, controls, and procedures aligned with industry frameworks. Cloud Infrastructure Security Architect: Secure solutions across Azure, AWS, and hybrid cloud environments. Define cloud security controls, landing zones, Zero Trust architectures, and secure network designs. Drive adoption of Infrastructure-as-Code security, DevSecOps, and cloud-native security services. Identity Access Management: Define enterprise IAM strategy including: • Single Sign-On (SSO) • Multi-Factor Authentication (MFA) • Privileged Access Management (PAM) • Identity Governance Administration (IGA) • Customer Identity Access Management (CIAM) Application Data Security: Establish secure application architecture patterns. Drive API security, microservices security, and secure SDLC practices. Define data protection strategies including encryption, tokenization, key management, and data loss prevention. Review emerging technologies and assess security implications. Regulatory Compliance Risk Management: Ensure alignment with banking regulations and security standards.

What you’ll do

Define enterprise security architecture, strategy, standards, and governance, and embed security-by-design across major projects and transformation programs. Secure cloud, identity, application, API, and data environments while managing cyber risk and supporting regulatory compliance.

Requirements

The posting specifies 10 or more years of experience and a mid-senior level. It does not state specific education, certifications, or other formal qualifications.

Listed skills

• Microsoft Azure · Preferred
• Regulatory Compliance · Preferred
• Risk Management · Preferred
• Amazon Web Services · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Enterprise Security Architecture
• Cybersecurity Strategy
• Security Governance
• Cloud Security
• Azure
• AWS
• Zero Trust Architecture
• Infrastructure as Code
• DevSecOps
• Identity and Access Management
• Privileged Access Management
• Application Security
• API Security
• Data Protection
• Risk Management
• Regulatory Compliance

Job areas

• Security & Safety
• Technology
• Management & Leadership
• Finance & Accounting

More jobs from Zodiac Solutions, Inc