Solution Architect – Security & API Infrastructure

Location: Toronto, ON – Hybrid (4 Days Onsite)

Contract Duration: 6–12 Months

Industry: Financial Services

Position Overview

We are seeking an experienced Solution Architect – Security & API Infrastructure to lead the design and architecture of secure, scalable, and highly available enterprise solutions across security, API management, cloud, and edge infrastructure.

The ideal candidate will have strong hands-on expertise with Apigee, Akamai and/or Cloudflare, AWS, enterprise DNS, security architecture, identity/fraud platforms, and API infrastructure . Experience within the financial services or banking industry is essential.

This role will work closely with Enterprise Architects, Engineering Leads, Product Owners, Security teams, and third-party vendors to define architecture standards, drive solution delivery, and ensure compliance with enterprise and regulatory requirements.

Key Responsibilities

Architecture & Solution Design

- Lead end-to-end solution architecture from requirements discovery and architecture definition through implementation, deployment, and operational handover.
- Define and enforce architecture patterns, standards, principles, and reference architectures aligned with enterprise architecture frameworks such as TOGAF, Zachman, or equivalent .
- Develop high-quality architecture deliverables, including:
- High-Level Design (HLD)
- Low-Level Design (LLD)
- Data Flow Diagrams
- Sequence Diagrams
- Architecture Decision Records (ADRs)
- Threat Models
- Evaluate technology platforms and architectural alternatives through proof-of-concept assessments and vendor evaluations.
- Ensure solutions meet requirements for scalability, availability, resiliency, security, performance, and maintainability.

Security Architecture

- Design enterprise security architectures covering encryption, key management, certificate lifecycle management, PKI, tokenization, and secrets management .
- Define security controls and architecture patterns for API gateways, WAF, DDoS protection, bot management, and edge security .
- Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms .
- Conduct security architecture reviews, threat modeling, risk assessments, and security control evaluations.
- Apply Zero Trust, least-privilege access, defense-in-depth, and secure-by-design principles.
- Ensure solutions align with applicable financial services regulations and security standards, including PCI-DSS, SOX, GDPR, PSD2, FCA, and Open Banking requirements .

API & Edge Infrastructure





- Define and govern enterprise API strategies using Apigee , including:
- API proxy architecture and development
- Shared flows
- Target servers
- OAuth/OIDC
- Rate limiting and traffic management
- API analytics
- Developer portals
- API monetization
- Architect and govern edge security and CDN solutions using Akamai and/or Cloudflare .
- Design and manage:
- WAF policies and rules
- Bot management
- DDoS protection
- Edge computing
- DNS services
- Traffic routing and optimization
- Design enterprise DNS architectures incorporating DNSSEC, GSLB, authoritative and recursive DNS, TTL strategies, failover, and multi-CDN approaches .

Cloud & Infrastructure Architecture

- Architect secure and scalable solutions on AWS , leveraging services such as:
- VPC
- IAM
- KMS
- CloudFront
- Route 53
- GuardDuty
- Security Hub
- AWS WAF
- AWS Shield
- Lambda
- ECS/EKS
- API Gateway
- Apply cloud-native security practices, including Zero Trust networking, least-privilege IAM, secrets management, encryption, and infrastructure-as-code security scanning .
- Design hybrid and multi-cloud connectivity and integration patterns where required.
- Ensure cloud solutions follow enterprise security, architecture, and operational standards.

Architecture Governance & Leadership

- Participate in and support enterprise architecture governance processes, including Architecture Review Boards (ARBs), Design Authority forums, and technical exception management .
- Define and maintain architecture standards, patterns, and technical guidelines.
- Identify and manage technical debt and architectural risks.
- Mentor engineering and development teams on secure architecture principles and enterprise standards.
- Collaborate with Enterprise Architects, Engineering Leads, Product Owners, Security teams, and external vendors.
- Maintain architecture decisions, standards, and documentation within the enterprise architecture repository.
- Influence technical decisions across teams without requiring direct management authority.

Required Qualifications & Experience

Core Technical Expertise

- 8+ years of experience in Solution Architecture, Technical Architecture, or related architecture roles.




- Minimum 5 years of experience focused on Security Architecture .
- Strong hands-on experience with Apigee API Management , including API proxies, shared flows, target servers, and analytics.
- Strong working knowledge of Akamai and/or Cloudflare , including:
- Akamai Property Manager
- Akamai WAF/KSD
- Akamai Bot Manager
- Akamai Edge DNS
- Cloudflare WAF
- Cloudflare Workers
- Cloudflare DNS
- Deep understanding of security protocols and encryption standards, including:
- TLS 1.2/1.3
- AES-256
- RSA
- Elliptic Curve Cryptography
- HSMs
- Tokenization
- Strong experience designing and managing enterprise-scale DNS architectures , including DNSSEC, GSLB, authoritative vs. recursive DNS, TTL strategies, and traffic management.
- Hands-on experience with ThreatMetrix or equivalent digital identity/fraud prevention platforms .
- Solid AWS architecture experience across security, networking, compute, API, and edge services.
- AWS Solutions Architect – Professional certification is preferred.

Financial Services & Governance

- Financial services industry experience is mandatory , including banking, payments, insurance, or capital markets.
- Proven experience with enterprise architecture governance, including:
- Architecture standards
- Architecture Review Boards
- Design authority
- Technical debt management
- Architecture compliance
- Exception management
- Strong understanding of financial services regulatory and compliance requirements such as PCI-DSS, SOX, FCA, PSD2, GDPR, and Open Banking .

Architecture & Engineering Practices

- Experience across the complete solution lifecycle: Discovery → Design → Build → Test → Deploy → Operate .
- Proficiency with architecture frameworks and methodologies such as TOGAF, C4 Model, and arc42 .
- Experience with architecture and modeling tools such as Lucidchart and Draw.io .
- Strong understanding of DevSecOps, CI/CD, and Infrastructure as Code (IaC) .
- Hands-on experience with Terraform and/or CloudFormation .
- Strong knowledge of microservices, event-driven architecture, and enterprise integration patterns .
- Experience with REST, GraphQL, messaging, and streaming technologies.

Nice-to-Have Skills

- Experience with additional cloud platforms such as Microsoft Azure or Google Cloud Platform (GCP) .
- Knowledge of identity and access management platforms such as Okta or Ping Identity .
- Experience with SIEM/SOAR platforms , including Splunk and Microsoft Sentinel.
- Knowledge of container and Kubernetes security.
- Experience with API security, service mesh, and modern cloud-native security architectures.

📌 Solution Architect – Security & API Infrastructure (Toronto)
🏢 Ardent Softsol
📍 Toronto