Apigee API Management

Design enterprise API strategies using Apigee including: API Proxy Design

Shared Flows

Target Servers

Developer Portals

Analytics

OAuth/OIDC

Rate Limiting

API Monetization

Job Title

Solution Architect (Security & API Infrastructure)

Location

Toronto, Ontario (Hybrid – 4 Days Work From Office)

Duration

6–12 Months

Required Experience

8+ Years (5+ Years in Security Architecture)

Primary Skills
Solution Architecture

Security Architecture

API Infrastructure

Apigee API Management

AWS Cloud Architecture

Akamai

Cloudflare

Enterprise Security

Financial Services

Role Description
1. Architecture & Solution Design

Lead end-to-end solution architecture across security, API, and cloud domains.

Gather requirements and define solution architecture from design through implementation and operational handover.

Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.).

Produce architecture artifacts including:
High-Level Design (HLD)

Low-Level Design (LLD)

Data Flow Diagrams

Sequence Diagrams

Threat Models

Evaluate emerging technologies through Proof of Concepts (POCs) and vendor assessments.

2. Security Architecture

Design enterprise security architectures covering:
Encryption at Rest

Encryption in Transit

Encryption in Use

Key Management

Certificate Lifecycle Management

Public Key Infrastructure (PKI)

Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms.

Define security policies for:
API Gateways

Web Application Firewalls (WAF)

DDoS Protection

Bot Management

Conduct:
Threat Modeling

Security Reviews

Risk Assessments

Ensure compliance with financial industry standards including:
PCI-DSS

SOX

GDPR

Open Banking

3. API & Edge Infrastructure

Design enterprise API strategies using Apigee including:
API Proxy Design

Shared Flows

Target Servers

Developer Portals

Analytics

OAuth/OIDC

Rate Limiting

API Monetization

Architect edge security solutions using:
Akamai

Cloudflare





Configure:
WAF Rules

Bot Manager

DDoS Protection

Edge Compute

DNS Management

Design enterprise DNS architecture including:
DNSSEC

Traffic Management

Failover

Multi-CDN Strategies

GSLB

TTL Strategies

4. Cloud & Infrastructure

Design secure AWS cloud solutions utilizing:
VPC

IAM

KMS

CloudFront

Route 53

GuardDuty

Security Hub

AWS WAF

AWS Shield

Lambda

ECS/EKS

API Gateway

Implement cloud-native security principles:
Zero Trust Networking

Least Privilege IAM

Secrets Management

Infrastructure-as-Code Security

Design hybrid and multi-cloud connectivity architectures.

5. Governance & Leadership

Participate in Architecture Review Boards (ARBs) and Design Authority forums.

Define enterprise architecture standards and governance.

Mentor development teams on architecture and security best practices.

Collaborate with:
Enterprise Architects

Engineering Teams

Product Owners

Third-party Vendors

Maintain architecture documentation and enterprise architecture repositories.

Required Experience
Core Technical Expertise

8+ years in Solution or Technical Architecture.

5+ years focused on Security Architecture.

Hands-on experience with:
Apigee API Management

API Proxy Development

Shared Flows

Target Servers

Analytics

Strong expertise with:
Akamai (Property Manager, WAF/KSD, Bot Manager, Edge DNS)

Cloudflare (WAF, Workers, DNS)

Deep understanding of:
TLS 1.2 / TLS 1.3

AES-256

RSA

Elliptic Curve Cryptography

HSM

Tokenization

Enterprise DNS architecture experience.

Practical experience with ThreatMetrix or similar fraud prevention platforms.

Strong AWS architecture experience (AWS Solutions Architect Professional preferred).





Domain & Governance Experience

Financial Services experience is mandatory:
Banking

Payments

Insurance

Capital Markets

Experience with:
Architecture Governance

Technical Debt Management

Architecture Review Boards (ARBs)

Enterprise Standards

Knowledge of compliance frameworks:
PCI-DSS

SOX

FCA

PSD2

Open Banking

Architecture Practices

Experience across the complete solution lifecycle:
Discovery

Design

Build

Test

Deploy

Operate

Familiarity with architecture frameworks:
TOGAF

C4 Model

arc42

Experience using:
Lucidchart

Draw.io

Strong understanding of:
DevSecOps

CI/CD Pipelines

Terraform

AWS CloudFormation

Experience with:
Microservices

Event-Driven Architecture

REST APIs

GraphQL

Messaging & Streaming

Desirable Skills

Microsoft Azure

Google Cloud Platform (GCP)

Okta

Ping Identity

Splunk

Microsoft Sentinel

SIEM/SOAR Platforms

Container Security

Soft Skills

Excellent stakeholder communication.

Ability to present complex technical concepts to executive and non-technical audiences.

Strong analytical and problem-solving skills.

Ability to work in fast-paced, highly regulated environments.

Team-oriented leadership with experience influencing cross-functional teams.

Preferred ATS Keywords

Solution Architect

Security Architect

Enterprise Architecture

API Infrastructure

Apigee

API Gateway

OAuth

OpenID Connect (OIDC)

AWS

Cloud Architecture

Akamai

Cloudflare

WAF

DDoS Protection

Bot Management

ThreatMetrix

PKI

TLS 1.3

AES-256

RSA

HSM

Tokenization

DNS

DNSSEC

Route 53

CloudFront

IAM

KMS

GuardDuty

Security Hub

Zero Trust

DevSecOps

Terraform

CloudFormation

TOGAF

C4 Model

REST APIs

GraphQL

Microservices

Event-Driven Architecture

Financial Services

Banking

PCI-DSS

SOX

PSD2

Open Banking

Architecture Review Board (ARB)

Solution Design

High-Level Design (HLD)

Low-Level Design (LLD)

Threat Modeling

Security Architecture

#J-18808-Ljbffr

📌 Solution Architect -Security & API Infrastructure (Ontario)
🏢 Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
📍 Ontario