About the Job:

Security Architect – Cybersecurity Platforms & Architecture

We are seeking an experienced Security Architect to design and develop enterprise security architecture patterns across a broad range of cybersecurity domains and technologies.

This is an architecture-focused role requiring broad knowledge across the cybersecurity ecosystem rather than specialization in a single security product. The successful candidate will evaluate existing and emerging security capabilities, identify architectural and attack-path gaps, and develop reusable security patterns that enable a more integrated, scalable and platform-oriented security environment.

Key Responsibilities

- Develop enterprise-level security architecture patterns, standards and reference architectures across multiple cybersecurity domains.
- Drive security platformization, identifying opportunities to consolidate capabilities, improve interoperability and reduce fragmented or overlapping security tooling.
- Assess security tools and platforms against enterprise requirements, architecture principles and identified attack paths/exposure scenarios.
- Identify gaps in existing security capabilities and recommend architectural approaches to reduce risk and strengthen preventative, detective and responsive controls.
- Design security patterns spanning applications, APIs, cloud, identity, infrastructure and DevSecOps environments.
- Define integration patterns between security platforms, enterprise technology platforms and development pipelines.
- Work with cybersecurity, cloud, infrastructure, application and engineering teams to translate security requirements into scalable technical architectures.




- Evaluate new cybersecurity technologies and determine how they fit within the broader enterprise security architecture.

Core Security Domains

Candidates should have strong architecture-level knowledge across several of the following areas:

Network & API Security

- Network security architecture and segmentation
- Web Application Firewalls (WAF)
- API security and API protection patterns
- Akamai WAF / Akamai security technologies
- Harness API Security or comparable API security platforms

Cloud Security

- Cloud Security Posture Management (CSPM)
- Cloud-Native Application Protection Platforms (CNAPP)
- Cloud workload, configuration and identity security
- Security architecture across major public cloud environments

Identity & Access Management

- Microsoft Entra ID
- SailPoint
- Identity governance and administration
- Authentication, authorization, privileged access and Zero Trust patterns

Application Security & DevSecOps

- Secure SDLC and DevSecOps architecture
- SAST, DAST and Software Composition Analysis (SCA)
- Integration of security controls into CI/CD pipelines
- Application and software supply-chain security patterns

Infrastructure as Code (IaC) Security

- Secure IaC development and deployment patterns
- IaC scanning and policy enforcement
- Security guardrails integrated into DevSecOps pipelines

Security Operations

- SIEM architecture
- SOAR and security automation




- Security telemetry, correlation and integration patterns
- Integration of preventative and detective security controls

What We're Looking For The ideal candidate will have:
- Significant experience in Cybersecurity Architecture, Enterprise Security Architecture or Solution Security Architecture.
- Broad understanding of cybersecurity technologies and how security capabilities interact across the enterprise.
- Demonstrated ability to create reference architectures, security patterns, architecture standards and technology roadmaps.
- Experience assessing security platforms for capability coverage, architectural gaps, integration opportunities and tool rationalization.
- Solid understanding of attack paths, exposure management and defense-in-depth principles.
- Ability to operate at both the conceptual architecture level and at sufficient technical depth to challenge designs and technology decisions.
- Experience working with large, complex enterprise environments and cross-functional architecture and engineering teams.
- Strong communication and documentation skills with the ability to present complex security architectures to both technical and senior stakeholders.

Preferred Qualifications

- Experience with architecture frameworks and methodologies such as SABSA, TOGAF or equivalent.
- Relevant security certifications such as CISSP, CCSP, SABSA, cloud security or vendor-specific certifications are considered an asset.

Role Type: Security Architecture

Seniority: Senior / Lead Architect

Focus: Enterprise Cybersecurity Architecture, Security Platforms, DevSecOps, Cloud, IAM, API Security and Security Operations

📌 Security Architect (Toronto)
🏢 AfxInfra
📍 Toronto