Security Architect (ID#5590)

New Value Solutions, a national IT consulting firm, is recruiting experienced Senior Security Architects to support IT consulting engagements focused on enterprise security architecture, cybersecurity modernization, secure solution design, cloud security, and the protection of critical information systems.

We are seeking accomplished Security Architects with demonstrated experience designing and evaluating enterprise security architectures, establishing technical security standards, and integrating security controls into complex technology environments.

Responsibilities:

• Design, develop, and maintain enterprise security architectures, technical security standards, reference architectures, and security design patterns.
• Assess existing technology environments, identify architectural security gaps, and recommend improvements to enterprise security capabilities.
• Develop security architecture solutions for enterprise applications, networks, infrastructure, databases, cloud platforms, and hybrid technology environments.
• Define and document security requirements, controls, and architectural recommendations aligned with organizational policies and applicable security standards.
• Design and evaluate identity and access management solutions, including authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and privileged access management.
• Develop secure architecture approaches for cloud adoption, application modernization, systems integration, and infrastructure transformation initiatives.
• Evaluate network security architectures, including segmentation, firewalls, secure connectivity, remote access, and Zero Trust principles.
• Conduct security architecture reviews, technical risk assessments, and solution design assessments to identify vulnerabilities and architectural risks.
• Support Security Assessment and Authorization (SA&A) activities, including security control selection, implementation guidance, and assessment documentation.
• Collaborate with enterprise architects, solution architects, cybersecurity analysts, infrastructure specialists, application teams, and business stakeholders to integrate security requirements into technology solutions.
• Evaluate security technologies, platforms, and architectural approaches based on effectiveness, scalability, interoperability, and operational requirements.
• Develop security architecture diagrams, solution designs, technical specifications, security control mappings, and implementation roadmaps.
• Participate in architecture governance, design reviews, security compliance assessments, and technology modernization planning.

Requirements:

• Extensive professional experience in cybersecurity, information security architecture, or enterprise security engineering.
• Demonstrated experience designing and implementing security architectures within large, complex enterprise IT environments.
• Strong knowledge of enterprise security architecture principles, security design patterns, threat modelling, and risk-based security controls.
• Experience developing security architecture solutions for applications, networks, infrastructure, cloud platforms, and enterprise systems.
• Strong understanding of identity and access management, authentication, authorization, encryption, and information protection technologies.
• Experience designing or evaluating network security solutions, including firewalls, segmentation, secure remote access, and Zero Trust approaches.
• Knowledge of cloud security architecture, including security considerations for Microsoft Azure, AWS, or comparable cloud platforms.
• Experience conducting security architecture assessments, technical security reviews, and risk evaluations.
• Familiarity with recognized security frameworks and standards such as NIST, ISO/IEC 27001, and enterprise security architecture methodologies.
• Experience developing security architecture documentation, technical standards, security requirements, and solution design recommendations.
• Experience collaborating with enterprise architecture, infrastructure, application development, and cybersecurity teams.
• Strong analytical, problem-solving, communication, stakeholder engagement, and technical documentation skills.
• Relevant post-secondary education in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or an equivalent combination of education and experience.

Preferred Qualifications:

• Previous experience providing security architecture services to Government of Canada departments or agencies.
• Experience supporting large-scale public sector cybersecurity modernization, cloud transformation, or enterprise security architecture initiatives.
• Familiarity with Government of Canada IT security policies, standards, enterprise architecture requirements, and security assessment processes.
• Experience applying ITSG-33, including security control selection, security architecture design, and Security Assessment and Authorization activities.
• Experience developing or reviewing Threat and Risk Assessments (TRAs), Statements of Sensitivity, security control profiles, and related government security documentation.
• Experience with Zero Trust architecture, identity-centric security, microsegmentation, and modern enterprise security models.
• Experience designing security solutions using Microsoft Entra ID, Microsoft Defender, Microsoft Sentinel, Azure security services, or comparable technologies.
• Experience with cloud security architecture, including Azure, AWS, cloud identity management, workload protection, and secure hybrid connectivity.
• Experience with security architecture frameworks such as SABSA, TOGAF, or comparable methodologies.
• Experience incorporating security requirements into DevSecOps, application development, API security, and enterprise integration architectures.
• Relevant certifications such as CISSP, CCSP, CISM, SABSA, TOGAF, or recognized cloud security architecture certifications.
• Experience working within formal government architecture governance, security compliance, documentation, and change management frameworks.
• Existing Government of Canada Reliability Status or Secret security clearance.

About New Value Solutions

New Value Solutions is a Canadian IT consulting and professional services firm with extensive experience supporting public sector organizations across Canada. We specialize in connecting experienced technology and business professionals with consulting engagements involving enterprise systems, digital transformation, cybersecurity, and IT modernization.

Engagements are available across Canada, with remote, hybrid, and onsite arrangements, start dates, and assignment details determined by individual client requirements as contracts are secured.

If you have the necessary expertise and are legally authorized to work in Canada, please submit your resume. We thank all applicants for their interest; however, only those shortlisted will be contacted.

ID # 5590