Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Responsibilities
Conduct threat modelling and security design reviews for application features, APIs, integrations, SaaS platforms, cloud services, and enterprise technologies
Translate business requirements into practical security requirements and secure design decisions
Provide secure design guidance across authentication, authorization, identity, API security, data protection, network security, cloud architecture, and third-party integrations
Develop, maintain, and promote security reference architectures, design patterns, technical standards, and reusable guidance
Assess architectures and recommend risk treatments, compensating controls, and design improvements
Provide architectural input into technology roadmaps, vendor selection, platform modernization, cloud adoption, and secure access initiatives
Provide security architecture guidance for Microsoft Azure, Microsoft 365, Entra ID, Defender, cloud workloads, secure networking, and enterprise collaboration platforms
Define identity security patterns, privileged access standards, authentication requirements, service principal controls, and non-human identity considerations
Provide guidance on data protection, classification, DLP, encryption, information protection, and client data handling
Lead or support security reviews for AI-enabled solutions, Copilot, Foundry, agentic AI, data-driven platforms, and emerging technologies
Define secure AI architecture patterns covering data access, identity, logging, monitoring, prompt risk, third-party integrations, and governance
Drive technical risk assessments for application, infrastructure, SaaS, cloud, AI, and integration changes
Evaluate vendor security architectures and solution designs
Translate incident learnings, threat intelligence, and control gaps into design patterns, detection opportunities, developer guidance, and prevention strategies
Participate in the Security Architecture Review Board and support documented risk decisions
Support client security assessments, vendor reviews, audit activities, and security control evidence
Build or guide automation for security design reviews, vulnerability triage, evidence collection, exception management, and repeatable security workflows
Evaluate and recommend vendor security solutions
Monitor emerging threats including supply chain attacks, API abuse, identity compromise, ransomware, AI-enabled phishing, and cloud misconfiguration
Mentor security team members and technology stakeholders
Serve as a senior technical security authority for the Canada region
Requirements
Post-secondary education in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience
Minimum 8+ years of experience in cybersecurity, security architecture, cloud security, infrastructure security, application security, or related technology risk roles
At least 4+ years of experience designing or reviewing secure enterprise, cloud, identity, SaaS, or application architectures
Experience conducting threat modelling, secure design reviews, architecture assessments, technology risk assessments, or security control reviews
Experience with Microsoft Azure security architecture, Microsoft 365 security, Entra ID, Defender, Sentinel, cloud networking, and secure access technologies
Experience with security frameworks and methods such as NIST, ISO 27001/27002, CIS Controls, MITRE ATT&CK, OWASP, or similar
Familiarity with AI security, data governance, privacy, DLP, secure software development, API security, or third-party risk is an asset
One or more relevant certifications such as CISSP, CCSP, CISM, GIAC, SABSA, TOGAF, Microsoft Security, or cloud security certifications are preferred
Deep understanding of enterprise security architecture, cloud security, identity security, Zero Trust, and secure design principles
Strong ability to conduct threat modelling and translate findings into practical design requirements and risk-based recommendations
Advanced knowledge of Microsoft Azure, Microsoft 365, Entra ID, Defender, Sentinel, and modern cloud-native security capabilities
Understanding of API security, SaaS security, data protection, encryption, authentication, authorization, privileged access, and third-party integration risks
Ability to communicate with executives, architects, infrastructure teams, application teams, vendors, and business stakeholders
Strong written communication skills for producing standards, reference architectures, technical guidance, and executive-level summaries
Ability to influence without direct authority and operate as a trusted advisor across multiple teams and initiatives
Curiosity and forward-looking mindset regarding AI, automation, emerging threats, cloud transformation, and evolving client expectations
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.