12 months remote contract

What the Client is Looking For

- 5-7 years of enterprise security engineering/architecture experience, with at least 2 years specifically as a security architect.
- Deep, hands-on experience implementing enterprise-wide Zero Trust architectures (NIST SP 800-207) across all domains (identity, data, application, network, asset, and device).
- Proven ability to define and document actionable Zero Trust security control sets and establish technical governance processes.
- Architecture framework certifications are highly valued (SABSA preferred, TOGAF desirable).

As a seasoned enterprise cybersecurity architect with experience in Zero Trust framework, this role will support the Zero Trust Program, an enterprise-wide implementation of cyber security capabilities and zero trust based controls. They will provide architectural leadership with a strong focus on technology governance and control definition. As a key contributor to the Zero Trust architecture governance function, activities and deliverables include defining and documenting Zero Trust based security control sets, developing zero trust design standards based on patterns, and establishing technical governance capabilities/process to ensure consistent policy enforcements across identity, data, application, network, asset and device domains.

The ideal candidate brings deep control framework expertise, practical experience with Zero Trust technologies, and a proven ability to translate strategic objectives into actionable, auditable, and scalable security controls.

Key Responsibilities (Services)

The candidate will provide following services:

- Support the enterprise-wide implementation of Zero Trust.
- Provide security architectural leadership.




- Develop cyber security policy & standard framework based on Zero Trust framework.
- Define and document Zero Trust based security control sets.
- Develop Zero Trust design standards.
- Establish technical governance capabilities and process.
- Ensure consistent policy enforcements across identity, data, application, network, asset and device domains.
- Provide regular updates to executive sponsors, directors, and other stakeholders as required.
- Support the planning, evaluation, and implementation of security tools and technologies.
- Other tasks as reasonably required by the BCLC Project Manager.

Qualifications Education and General Skills

- A degree in engineering, computer science, information security or equivalent in a related discipline.
- 5-7 years of progressive experience in enterprise security engineering or architecture.
- Minimum 2 years working experience in the role of security architect.
- Enterprise/Security architecture certification such as SABSA (preferred) or TOGAF (desirable).
- Relevant technical certifications (CISSP, SANS GIAC, AWS/GCP) would be an asset.

- Broad knowledge of different security domains i.e., IAM, Cloud Security (e.g., AWS, Azure, GCP), Data Security (e.g., DLP), Security Operations, Software Development Security, Security and Risk Management, Asset Security, and Communications and Network Security (e.g., firewall, NACL, Network Segmentation).




- Ability to articulate complex topics effectively to technical and non-technical stakeholders.
- Demonstrated ability to understand business requirements and recommend security solutions to meet business objectives.

- Strong ability to work with cross-functional teams including IT, risk, compliance, and business units.
- Excellent innovation in problem solving and analytical thinking.
- General business acumen.

Zero Trust Domain Knowledge and Experience

- Deep understanding of Zero Trust principles (e.g., NIST SP 800-207) and how to apply them across identity, data, application, network, asset and device layers.

- Experience implementing Zero Trust projects in a large complex organization in the role of enterprise security architect.
- Working experience implementing security technologies in IAM, Network Security, Cloud Security, and Endpoint & Data protection would be an asset.

Security Controls and Frameworks

- Experience defining security control sets based on Zero Trust principles and industry framework.
- Familiarity with NIST, ISO 27001, CIS Controls, and other standards.

Architecture Design, Diagrams, Patterns

- Skilled in producing reference architectures and security access pattern diagrams.
- Ability to create transparent and concise documentation of security requirement and technical standards.

Technical Governance Capabilities/Process

- Experience designing processes that embed governance into architecture review boards, design patterns, and solution lifecycles.

- Ability to create and refine technical policies, standards, and procedures.
- Experience with baselining and enforcing secure configurations across cloud, endpoint, and network environments.

📌 Enterprise Cybersecurity Architect (Vancouver)
🏢 TEEMA
📍 Vancouver