Position Description:

Location: Winnipeg, Manitoba Security Clearance: Eligible for Reliability or Secret Clearance The Cybersecurity Solution Architect is responsible for designing secure, scalable, and resilient technology solutions that align with organizational security standards, enterprise architecture principles, regulatory requirements, and business objectives. The role provides cybersecurity architecture leadership across cloud, on-premises, and hybrid environments and works closely with business stakeholders, enterprise architects, infrastructure and application teams, security operations, risk and compliance teams, and technology vendors. The Cybersecurity Solution Architect will translate business and technical requirements into practical security architectures, identify security risks and control requirements, evaluate technologies, and provide architectural guidance throughout the solution lifecycle.

Your future duties and responsibilities:

Key Responsibilities: Security Architecture & Solution Design

- Design end-to-end cybersecurity architectures for enterprise applications, infrastructure, cloud platforms, networks, and digital services.
- Develop security architecture diagrams, solution designs, security patterns, reference architectures, and technical standards.
- Review solution architectures and identify security risks, vulnerabilities, architectural gaps, and required security controls.
- Ensure security requirements are incorporated throughout the solution design and implementation lifecycle.
- Apply security-by-design, defense-in-depth, least privilege, Zero Trust, and secure-by-default principles.
- Provide architectural guidance for on-premises, cloud, SaaS, PaaS, IaaS,



and hybrid environments.
- Evaluate proposed architecture changes and provide recommendations to improve security, resilience, scalability, and operational effectiveness.
- Design and review security architectures for Microsoft Azure, AWS, and/or Google Cloud environments.
- Define security requirements for cloud identity, networking, workloads, storage, encryption, logging, monitoring, and data protection.
- Provide guidance on secure cloud landing zones, network segmentation, private connectivity, firewalls, WAF, API security, workload protection, and cloud security posture management.
- Assess container, Kubernetes, serverless, and contemporary application architectures where applicable.
- Support secure integration between cloud and on-premises environments.

Identity & Access Management

- Develop architecture and security patterns for Identity and Access Management (IAM).
- Provide guidance on authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), federation, Privileged Access Management (PAM), and identity governance.
- Apply Zero Trust principles to identity, endpoint, application, network, and data access.
- Review service accounts, application identities, machine identities, and privileged access models.

Application & Data Security





- Provide security architecture guidance throughout the Software Development Lifecycle (SDLC).
- Define security requirements for applications, APIs, databases, integrations, and third-party services.
- Support secure DevSecOps practices, including security testing and controls within CI/CD pipelines.
- Advise on encryption, key management, secrets management, certificate management, tokenization, and data loss prevention.
- Review application threat models and recommend appropriate mitigating controls.
- Support secure adoption of AI, automation, and emerging technologies where applicable.

Security Technology & Controls

Provide architectural guidance and technical oversight across security capabilities, including:

- Security Information and Event Management (SIEM) and Security Operations.
- Endpoint Detection and Response (EDR/XDR).
- Network Detection and Response (NDR).
- Firewalls, IDS/IPS, and network segmentation.
- Secure Access Service Edge (SASE) and Security Service Edge (SSE).
- Cloud security and CNAPP/CSPM.
- Identity and Privileged Access Management.
- Vulnerability Management.
- Email and collaboration security.
- Web Application Firewalls and API security.
- Encryption and Key Management.
- Secrets and Certificate Management.
- Security automation and orchestration.
- Backup, recovery, resilience, and ransomware protection.

Risk, Governance & Compliance

- Perform architectural security assessments and document identified risks and recommended controls.
- Translate cybersecurity policies, standards, regulatory requirements, and risk requirements into technical

📌 Snr Security Design Specialist to implement security by design, security mitigations and perform (Winnipeg)
🏢 S.i. Systems
📍 Winnipeg