We are looking for an experienced Security Architect for a Part time consulting engagement, ongoing advisory position, in Calgary, Alberta . Must be legally entitled to work in Canada.

Position is available as hybrid. Part-time hours (schedule to be confirmed).

Role Description

Our client is looking for a part-time Security Architect to establish Secure Software Development Lifecycle (SSDLC) guidelines and embed "Security by Design" principles across a major SAP HANA-to-RISE migration and related technology initiatives. This is primarily an advisory and standards-setting role: defining how security gets built into the development lifecycle, rather than day-to-day hands-on security operations. Given the part-time nature of the engagement, the focus is on periodic guidance and review rather than continuous embedded oversight.

Responsibilities

- Define and document SSDLC guidelines covering requirements, design, development, testing, and deployment stages
- Establish Security by Design standards and secure architecture patterns for SAP RISE and related systems
- Create and lead threat modeling and secure design review processes
- Set policies for secure coding practices, dependency/vulnerability management, and secrets management
- Advise project and delivery teams on security requirements and risk during design and build phases
- Define security acceptance criteria and gates for the SDLC/test process, coordinating with the Test Lead where relevant
- Support security-related audits,



compliance requirements, and vendor/tooling reviews as needed
- Provide periodic guidance and review rather than continuous embedded oversight, given the part-time nature of the role

Required Skills and Experience

- Proven experience as a Security Architect or in a similar security design/governance role, with strong knowledge of SSDLC principles and Security by Design frameworks
- Experience defining security standards, policies, and review processes for software or ERP projects
- Familiarity with threat modeling methodologies (e.g., STRIDE, DREAD, or similar)
- Strong communication skills — able to advise both technical teams and business stakeholders
- Comfortable working part-time/fractionally across a project rather than full-time embedded

Desired Skills and Experience

- Experience securing SAP environments, ideally SAP RISE or SAP HANA, is an asset
- Relevant certifications (e.g., CISSP, CSSLP, SABSA, TOGAF with security focus) are an asset
- Experience in construction or similarly regulated industries is an asset
- Familiarity with cloud security models relevant to SAP RISE (as it runs on hyperscaler infrastructure) is an asset

InSync Systems Inc. is a privately-owned boutique Canadian Resourcing and Consulting Services Company that works closely with a range of corporate clients across multiple industries to bring them solutions that effectively address their business needs.

#J-18808-Ljbffr

📌 Security Analyst (Calgary)
🏢 InSync Systems
📍 Calgary