The Digital Information Security Engineering team is seeking a Principal Data Security Architect to define, design, and influence the enterprise’s most complex data protection capabilities across SaaS, web, endpoint, and cloud environments.This is an individual-contributor role for data-centric security — a hands‑on technical leader who sets architectural direction, builds reference implementations, and solves the hardest data protection problems at enterprise scaleThe ideal candidate will focus on protecting sensitive data throughout its lifecycle, enabling privacy‑by‑design architecture, the end‑to‑end technical design for CASB, DSPM, eDLP, advanced content detection (EDM/IDM), secure file sharing, and translate those capabilities into durable, measurable risk reduction.Beyond engineering, the role shapes enterprise data governance strategy and partners closely with the Data Protection Product Manager to set roadmap and prioritiesOwn the enterprise reference architecture for data‑centric security across SaaS, web, endpoint, and cloudDefine the architecture patterns, design standards, and guardrails that engineering teams build againstLead design for the most complex, novel, or high‑risk problems — articulating options, trade‑offs (security vs. usability vs. cost vs. operability),



and a transparent recommendationServe as the top technical authority and design‑review escalation point for the data protection functionProvide hands‑on mentorship and technical direction to senior engineers without formal reporting authorityProve out emerging technologies through hands‑on POCs and pilots before enterprise adoptionArchitect enterprise‑wide continuous discovery and classification of sensitive data across SaaS applications, cloud storage and object stores, and unstructured repositoriesDesign the posture‑analysis model for overshared or publicly exposed data, sensitive data sprawl, and misconfigured access controlsEstablish risk‑based, automated remediation workflows in partnership with data owners and application teamsDefine continuous monitoring of data exposure and compliance posture at scaleDesign the enterprise eDLP architecture to inspect and control data in motion across web and cloud channelsOwn advanced detection strategy, including Exact Data Match (EDM) for structured sensitive data (PII, PCI, financial datasets) and Indexed Document Matching (IDM) for unstructured documents and intellectual‑property protectionEstablish the engineering lifecycle for EDM data sets and IDM fingerprinting repositories — covering scale, freshness, and integrityDefine real‑time enforcement models (block, quarantine, alert, coach) balanced against business disruptionSet the detection‑tuning standards that systematically drive down false positives and false negativesArchitect secure data‑

📌 Principal Data Security Architect (Toronto)
🏢 Equinix
📍 Toronto