Technology Senior ArchitectArchitect, Cybersecurity

THE BUSINESS

We are Everyday Luxury.

Its what we do and how we do it together.

Its working alongside world-class talent in pursuit of world-class results.

Its maximizing your potential in a high-performance culture.

Its knowing that wherever you are you belong.

Its elevating your world and the world of those who love and will love Aritzia.

Its You. And an endless runway of opportunity.

With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America including Toronto New York Los Angeles and Seattle our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So you can do what you do best with us.

THE TEAM

The mission of the Cybersecurity Department is to deliver highquality cybersecurity services and solutions that minimize risk across Aritzias systems and data.

THE OPPORTUNITY

Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing engineering and enabling secure technology solutions that protect Aritzias systems and data reduce cybersecurity risk and enable the business to operate and innovate securely. As the Senior Architect/Architect Cybersecurity you will define secure architectures reusable security patterns and reference architectures across Aritzias retail eCommerce enterprise cloud SaaS and integration environments. You will partner with business and technology teams to evaluate risk establish proportionate security requirements and guide solutions from early design through implementation and assurance. With your valuable contribution to the business in this role the opportunities are endless from a rewarding career in Cybersecurity to continued growth and development with Aritzia.

THE ROLE

As the Senior Architect/Architect Cybersecurity you will:

• Create practical reusable security patterns and reference architectures for identity applications APIs integrations cloud platforms data protection network segmentation and privileged access.
• Lead security architecture reviews for proposed and changing solutions identify trust boundaries and threats and define clear proportionate implementable security requirements and acceptance criteria.
• Design secure architectures for retail and e-commerce capabilities including customer identity mobile and web applications checkout payment integrations point-of-sale environments commerce platforms and third-party services.
• Perform threat modeling to evaluate abuse scenarios credential theft authorization failures data exposure integration compromise and attack paths across connected systems.
• Define identity architecture for human and workload identities federation service accounts privileged access least privilege secrets and credential lifecycle management.
• Guide consistent hybrid cloud security architecture across Microsoft Azure Google Cloud Platform on-premises platforms SaaS services and supporting integrations.
• Architect secure AI adoption by defining trust boundaries and control patterns for agents MCP servers retrieval systems external inference services tool execution sensitive data access human approval and auditability.
• Define architecture-specific detection and response requirements including required telemetry logging retention correlation alerting and response capabilities.
• Translate PCI DSS and other applicable compliance requirements into architecture decisions control requirements and evidence expectations.
• Document architecture decisions and exceptions including trade-offs residual risks compensating controls accountable owners and review dates.
• Drive adoption of approved security patterns and reduce avoidable design variation recurring control gaps and implementation ambiguity.
• Communicate architecture risks decisions and requirements clearly to technical teams business stakeholders governance forums and leaders.

THE QUALIFICATIONS

The Senior Architect/Architect Cybersecurity has:

• Proven skills certifications education and/or experience:
  • CISSP CCSP SABSA Chartered Security Architect or equivalent cloud and security architecture certifications from Microsoft Azure Google Cloud or other recognized providers.
  • Demonstrated experience creating secure design patterns and reference architectures that technology teams adopted in practice.
  • Strong knowledge of application and API security identity architecture cloud architecture network segmentation privileged access integration security and data protection.
  • Experience performing threat modeling identifying trust boundaries and attack paths and communicating risk to technical and business stakeholders.
  • Experience with Microsoft Azure Google Cloud Platform on-premises SaaS and hybrid cloud architecture.
  • Experience with retail and/or e-commerce security architecture particularly payments customer identity point-of-sale mobile commerce and consumer-facing applications.
  • Experience with secure development CI/CD and software supply chain security and the intersection between architecture requirements and engineering implementation.
  • Practical experience or strong working familiarity with agentic AI architectures including agents MCP integrations retrieval systems workload identity tool access controlled execution and external inference services.
  • A commitment to learn and apply Aritzias Business and People Leadership principles

THE COMPENSATION

At Aritzia we provide market-leading compensation packages designed to reward impact through our pay-for-performance philosophy.

The range for roles at this level is $100000$300000 per year. Total compensation may include base bonus and/or equity depending on the role which has the potential to be greater than this range.

With comprehensive benefits aspirational workspaces and elevated perks and experiences we provide it all.

THE PERKS

Some of the industry-leading benefits you will receive working at Aritzia:

• Product Discount Maybe youve heard of our famous product discount Or our exclusive private shopping events You have now.
• Baby Leave Program We provide up to 16 weeks of paid time to support you and your growing family.
• A-OK Commissary & Cafe Everyday Luxury dining exclusive to Aritzia. Our in-house bistro and cafe is a private oasis where employees can enjoy curated subsidized Everyday Luxury dining.
• The SET Our in-office fitness studio and gym with state-of-the-art equipment custom-created classes and optional personal training. Open 7 days a week it works out well.
• Aritzia Virtual Wellness Because your health happiness and safety matter we provide 24/7 resources to support you in your wellbeing goals whether theyre physical mental social or financial.
• Aspirational Workplace Our offices are specially designed to be spaces of creativity productivity and inspiration. Theyre also dog friendly. Woof.
• Amenities Additional amenities include a private parents room shower facilities with elevated complementary conveniences bike rooms and more.
• The Extras We also offer a multitude of other perks like dry-cleaning hotel and restaurant discounts self-care promos and on-site medical care.

ARITZIA

Aritzia is an Equal Employment Opportunity employer. Our goal is to be inclusive diverse and representative of the communities where we work while creating an environment where every person can enjoy a successful career. This commitment applies to all candidates and employees regardless of race ethnicity citizenship creed place of origin religion sex gender identity gender expression sexual orientation family status marital status disability age and any other protected characteristic.

Requests for accommodation due to a disability or any other protected characteristic can be made at any stage of the recruitment process and during employment by contacting our People & Culture Team.

Were committed to making your experience positive and transparent. Please note our recruiters will only contact you using an @ email address. If you receive recruitment-related messages from other domains please disregard them.