About the job RQ09515 - Technology Architect - Senior The

Senior Technology Architect

role requires deep knowledge, expertise, and experience in cyber security solutions, security operations (SecOps) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next‑generation network security. The resource also requires hands‑on experience in

analyzing, configuring, implementing, and troubleshooting

cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K12 school board workplace.

Responsibilities

Providing subject‑matter expertise, tactical, operational advice, consultancy, and training on all aspects of cyber security and network solutions such as:

Cyber security solutions to protect, detect, and respond to cyber threats.

Zero‑trust architecture (ZTA) solutions.

Cloud security solutions.

Use of MITRE ATT&CK;, D3FEND and ATLAS frameworks in security operations.

Various vendor‑specific cyber security and network solutions.

Security operations (SecOps) and AI‑operations (AIOps) practices.

Delivering solution and architecture guidance, training, and implementation support for next‑generation networks, network protection and cyber security technologies, including:

Security service edge (SSE)/secure access service edge (SASE), including integration of network and security functions such as secure web gateway (SWG), cloud access security broker (CASB) and zero‑trust network architecture, firewall‑as‑a‑service (FWaaS).

SD‑WAN (software‑defined wide area network) and software‑defined networking (SDN).





AI and machine learning (ML)‑driven network and security technologies.

Endpoint protection platforms (EPP), endpoint detection and response (EDR), and extended detection and response (XDR) solutions.

Advanced intrusion prevention systems (IPS), intrusion detection systems (IDS), network access control and distributed denial‑of‑service (DDoS) protection.

Identity security and authentication solutions (passwordless, password‑based, certificate‑based, MFA).

Incident response and incident management (IR & IM) solutions.

Automated vulnerability and patching.

User and entity behaviour analytics (UEBA).

Penetration testing and automated red teaming.

Operation technology (OT) security.

Providing technical guidance, delivering solution, training, and implementation support for strategic integration of hybrid cyber security operating models involving both in‑house and

outsourced MSSP (managed security services provider) capabilities , including:

Oversight of MSSP integration and optimisation.

Security operations architecture planning.

Threat detection and incident response.

Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), EDR/XDR, and threat intelligence platforms in a hybrid implementation.

Automation and orchestration workflows.

Governance,



risk, and compliance in a hybrid (in‑house and outsourced) security operations environment.

Providing subject‑matter expertise in network operations centre (NOC) and security operations centre (SOC) technologies, services, and tools, including, but not limited to:

Security Information and Event Management (SIEM).

Security Orchestration, Automation and Response (SOAR).

Strategic use of telemetry and analytics tools to support architectural decisions.

Designing and implementing

end‑to‑end security automation workflows using SOAR platforms

(e.g., Microsoft Sentinel, Cortex XSOAR), including bi‑directional integrations, telemetry ingestion, and orchestration of real‑time response actions.

Providing expertise on integrating

advanced AI in cyber security, including agentic AI and autonomous security , to support automation maturity and organisational readiness.

Deploying

agentic AI‑based automation

for incident response, phishing mitigation, access control, and exposure management across distributed environments.

Developing

observability dashboards and managing security metrics (KPIs/KRIs)

to measure automation effectiveness, operational maturity, and MSSP accountability.

Executing and maintaining

continuous automated red‑team (CART) platforms

(e.g., SCYTHE, Caldera, AttackIQ) and integrating red‑team outputs into detection tuning and playbook updates.

Applying

data science and ML techniques to security telemetry

for anomaly detection, triage automation, and prioritisation scoring.

Collaborating with MSSPs and internal teams t

📌 Technology Architect - Senior (Toronto)
🏢 Rubicon Path
📍 Toronto