Senior Security Delivery Solution Architect II

Summary

Our Security Professional Services delivery team has an immediate need for a highly experienced and motivated Security Delivery Solution Architect (DSA) to lead the design development and implementation of complex cybersecurity solutions for major Canadian federal government clients. As a key technical authority you will be responsible for translating intricate government security requirements into robust compliant and effective security architectures. You will act as the primary technical interface between our clients and delivery teams ensuring that solutions not only meet but exceed the stringent security mandates of the Government of Canada (GoC).

Key Responsibilities

Solution Architecture & Design:
o Lead the end-to-end architectural design of security solutions covering cloud network identity data and application security domains.
o Translate client business objectives and security requirements into detailed technical specifications including High-Level Designs (HLDs) and Low-Level Designs (LLDs).
o Ensure all solutions are designed in strict alignment with Government of Canada standards and frameworks including ITSG-33 ITSG-22 and the Profile-Based Mission Management (PBMM) model.
o Develop and present architecture diagrams roadmaps and technical proposals to both technical and executive-level stakeholders.

Technical Leadership & Delivery Oversight:
o Serve as the senior technical expert and trusted advisor for all security aspects of the project lifecycle.
o Provide technical guidance and mentorship to engineering and implementation teams throughout deployment integration and testing phases.
o Oversee the successful delivery of security solutions ensuring they are completed on schedule within budget and to the clients satisfaction.
o Lead the resolution of complex technical challenges and integration issues.

Client Engagement & Pre-Sales Support:
o Collaborate with federal government clients to understand their unique security challenges operational constraints and strategic goals.
o Contribute technical expertise to RFPs proposals and Statements of Work (SOWs) ensuring proposed solutions are viable competitive and compliant.
o Build and maintain strong long-term relationships with client stakeholders establishing credibility and trust.

Compliance & Risk Management:
o Ensure all architectural solutions successfully meet GoC security controls and are prepared for the Security Assessment & Authorization (SA&A) process.
o Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities in proposed designs.
o Create and maintain comprehensive documentation required for security audits and compliance verification.

Critical Qualifications

Security Clearance: Must currently hold or be eligible to obtain a Government of Canada Secret (Level II) or Top Secret security clearance. Canadian Citizenship is a mandatory prerequisite for this clearance.
Experience:
o 10 years of progressive experience in the IT security field.
o 5 years in a dedicated security architecture or senior consulting role.
o Demonstrable experience designing and delivering large-scale security solutions for Canadian federal government departments or agencies (e.g. SSC DND CSE TBS).
GoC Expertise: Deep hands-on knowledge of Government of Canada security frameworks including:
o ITSG-33 (IT Security Risk Management: A Lifecycle Approach)
o ITSG-22 (Baseline Security Requirements for Network Security Zones)
o PBMM (Profile-Based Mission Management)
o GoC Cloud Guardrails and Secure Cloud Adoption strategies.
Technical Proficiency: Expert-level knowledge across multiple security domains:
o Cloud Security: AWS Microsoft Azure (including Azure Government Canada).
o Network Security: Firewalls IDS/IPS VPNs segmentation SASE.
o Identity & Access Management (IAM): PKI MFA PAM SSO Federation.
o Security Operations: SIEM/SOAR EDR/XDR Threat Intelligence.
o Data Security: Data Loss Prevention (DLP) encryption data classification.
Certifications: Must hold a senior industry certification such as CISSP CISM or CCSP.
Communication: Exceptional written and verbal communication skills with the ability to articulate complex technical concepts to diverse audiences.
High level of personal integrity and the ability to professionally handle confidential matters and demonstrate a high level of judgment and maturity.
High degree of initiative dependability and ability to work with little supervision.

Preferred Qualifications

Bilingualism: Fluency in both English and French is a significant asset.
Advanced Certifications: CISSP-ISSAP (Information Systems Security Architecture Professional) TOGAF SABSA or cloud-specific security certifications (e.g. Azure/AWS Security Specialty).
DevSecOps: Experience integrating security controls and practices into CI/CD pipelines.
Zero Trust: Practical experience designing and implementing Zero Trust Architectures
Experience in business continuity planning auditing and risk management