Cybersecurity Architect at Canaccord Genuity designing proactive security solutions. Collaborating with Security team and implementing Microsoft Defender Suite across hybrid environments.
Responsibilities
Architect, design, and implement proactive, defense-in-depth security solutions aligned with zero trust principles and industry best practices across on-premises, cloud, and hybrid environments.
Collaborate closely with the Security team and Enterprise Technology leadership to align security architecture with business objectives, technical infrastructure, and organizational risk tolerance.
Lead enterprise-wide deployment, integration, and optimization of the Microsoft Defender Suite (Defender for Endpoint, Cloud, Identity, Office 365) and complementary security platforms for comprehensive threat detection and response.
Design and oversee identity and access management (IAM) strategies, including Azure AD, conditional access, privileged access management (PAM), and privileged password vaulting solutions.
Architect network security and application protection solutions including secure segmentation, zero trust network access, load balancing, web application firewalls, and secure remote access frameworks.
Design vulnerability management, network detection and response (NDR), and secure access service edge (SASE) architectures to provide end-to-end security visibility and threat prevention.
Conduct threat modeling, security assessments, and architecture reviews to identify risks and implement strategic security enhancements across legacy and modern systems.
Serve as a change agent, driving security culture transformation and adoption of security best practices through mentoring, training, presentations, and executive communication.
Provide strategic security governance guidance aligned with compliance frameworks and risk tolerance; present complex technical concepts to all organizational levels.
Drive innovation by evaluating and implementing emerging security technologies, methodologies, and threat intelligence.
Requirements
Minimum 3+ years architecting enterprise security solutions with deep expertise in proactive threat prevention and zero trust architecture.
Advanced proficiency with Microsoft Defender Suite (Defender for Endpoint, Cloud, Identity, Office 365); SC-100/SC-200/SC-300 or equivalent certification or in-progress.
Strong hands-on experience architecting identity and access management (IAM), including cloud directory services, conditional access policies, privileged access management (PAM), and privileged credential management platforms.
Proven expertise designing network security architectures: zero trust segmentation, load balancing, web application firewalls, SASE platforms, and secure remote access solutions.
Demonstrated proficiency with vulnerability management platforms, network detection and response (NDR) tools, and security information and event management (SIEM) solutions.
Bachelor's degree in Cybersecurity, IT, Computer Science, or equivalent professional experience.
CISSP or equivalent advanced certification is a strong benefit.
Strong understanding of threat modeling, security architecture frameworks (NIST, ISO 27001), and compliance requirements relevant to financial services (SOC 2, PCI-DSS).
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.