Senior Cloud Security Architect

Position Description:

We are Canadas largest independent information technology services firm and after 45 years were still growing! Join us as a Senior Cloud Security Architect in our Insurance Team.

This role is hybrid and requires you to be at Markham at a minimum 3 days per week - subject to change at any time.

Your future duties and responsibilities:

Design and implement secure AWS multi-account architectures using Control Tower SCPs and IAM best practices.
Develop security governance aligned with CIS NIST and ISO frameworks.
Implement encryption key management and threat detection using AWS KMS GuardDuty Security Hub and Macie.
Architect secure network designs with AWS WAF Shield and VPC segmentation.
Embed security in IaC templates (Terraform CloudFormation) and automate incident response workflows.
Conduct risk assessments threat modeling and posture management for AWS workloads.
Collaborate with cross-functional teams and mentor engineers on cloud security best practices.

Required qualifications to be successful in this role:

AWS Cloud Security Architecture (4 years): Design and implement secure compliant multi-account AWS environments.
Cybersecurity (8 years): Enterprise security architecture governance and compliance across cloud and hybrid infrastructures.
Secure Landing Zones: AWS Control Tower Organizations SCPs.
Identity & Access Management: AWS IAM SSO STS Okta Azure AD integration.
Encryption & Key Management: AWS KMS CloudHSM Secrets Manager.
Threat Detection & Monitoring: Security Hub GuardDuty Macie Inspector CloudTrail AWS Config.
Network Security: AWS WAF Shield Network Firewall VPC segmentation.
Compliance & Governance: CIS Benchmarks Audit Manager Trusted Advisor.
Infrastructure as Code: Security templates in Terraform CloudFormation CDK.
Incident Response & Automation: AWS Lambda Step Functions EventBridge.
Data Protection: S3 Object Lock Access Points Macie.
Risk & Threat Modeling: Architecture reviews for AWS workloads.
Monitoring & Metrics: CloudWatch SIEM/SOAR integrations.
Professional Skills
Strong governance and compliance mindset.
Excellent communication and collaboration skills.
Leadership in security architecture and mentoring.
Nice-to-Have
AWS Security Specialty CISSP CISM certifications.
Multi-cloud security (Azure/GCP).
Container security (ECS EKS Lambda).
DevSecOps integration and automation tools (Ansible Python).
Familiarity with Zero Trust principles.
Education & Experience
Bachelors in Computer Science Information Security or equivalent.
8 years in cybersecurity 4 years in AWS Cloud Security Architecture.

#LI-BN

Use of the term architect in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT engineering-related functions but licensure from an engineering regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.

Use of the term architect in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT architect-related functions but licensure from an architect regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.

Skills:

• Business Analysis
• Delivery Management
• Financial Services
• Integration Architecture
• Solution Analysis
• Solution Design
• Solutions Architecture

What you can expect from us:

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer being able to perform your best during the recruitment process is important to us. If you require an accommodation please inform your recruiter.

To learn more about accessibility at CGI contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our teamone of the largest IT and business consulting services firms in the world.