Responsible for shaping enterprise security strategy, driving Zero Trust adoption, and leading identity, cloud, network, data protection, and AI security initiatives. The position combines hands-on architecture with strategic influence, providing technical ownership across multiple security domains while partnering with business and technology leaders to deliver secure, scalable solutions.

Client Details A company in the property industry based in GTA.

Description

Responsibilities

- Own and evolve client's enterprise security architecture, reference architectures, and design standards in alignment with the information security strategy and Zero Trust Architecture principles.
- Lead security design for identity and access management, including authentication, authorization, federation, privileged access, and conditional access design across Active Directory, ADFS and Entra ID environments.
- Mature network security architecture, including secure access (SSE/SASE), network segmentation, and least-privilege access models.
- Define and continuously improve the security posture of Microsoft 365 and Azure, including Purview (DLP, sensitivity labels, retention), Exchange Online, SharePoint Online, and Entra ID configuration baselines.
- Provide security design review and consultation for new projects, applications, cloud services, and infrastructure changes, embedding security requirements early in the lifecycle.
- Lead design of Agentic AI security strategy
- Develop and maintain security standards, patterns, and hardening baselines
- Partner with security operations on detection and response architecture,



ensuring telemetry, logging, and control coverage across endpoints, identity, email, and network layers.
- Assess and advise on the security of third-party and SaaS solutions, including AI-enabled platforms, as part of vendor risk and technology intake processes.
- Contribute to incident response as a senior technical escalation point, and translate lessons learned into architectural improvements.
- Communicate architecture decisions, risks, and trade-offs clearly to technical teams and executive stakeholders, including contributions to board- and committee-level reporting.

MPI does not discriminate on the basis of race, religion, sex, sexual orientation, gender identity or expression, age, disability, marital status, or based on an individual's status in any group or class otherwise protected under applicable human rights legislation. MPI encourages applications from minorities, women, the disabled and all other qualified applicants.

Profile

- 5+ years of hands on information security experience.
- Strong, proven skills in identity and access management (IAM), including Entra ID, Active Directory, privileged access management, conditional access, and contemporary authentication technologies.




- Experience securing Microsoft 365 and Azure environments, including data protection, information governance, and Zero Trust architecture.
- The ideal candidate will have technical ownership across multiple security domains, developing architectural standards, and leading complex transformation initiatives.

Education:
- Certificate (or working towards) information security (CISSP, CISA, CSIM, CRISC)

Nice to Have
- Cisco Umbrella / Cisco Secure Access
- Microsoft 365 security and compliance stack
- CrowdStrike Falcon

Job Offer

- Lead a significant enterprise identity transformation and modernisation program.
- Own security strategy and architecture across identity, cloud, network, data protection, and AI domains.
- Influence enterprise-wide technology decisions and contribute to executive-level security discussions.
- Drive Zero Trust adoption and strengthen data protection capabilities through Microsoft security technologies.
- Work hands-on with modern platforms while shaping long-term security standards, architecture, and strategy.
- Hybrid working environment
- 4 weeks vacation + competitive benefits package including RRSP match, discretionary bonus

MPI does not discriminate on the basis of race, religion, sex, sexual orientation, gender identity or expression, age, disability, marital status, or based on an individual's status in any group or class otherwise protected under applicable human rights legislation. MPI encourages applications from minorities, women, the disabled and all other qualified applicants

📌 Cyber Security Engineer (Greater Toronto Area)
🏢 Michael Page
📍 Greater Toronto Area