Security Architect – SecDesign, Cloud… at Astra-North… · Montreal

Security Architect – SecDesign, Cloud Security & Architecture Governance​

Role Overview

• Assess and strengthen the security posture of enterprise technology ecosystems through security architecture assessments.

• Conduct deep security reviews across systems, applications, and business processes to identify risks, evaluate controls, and recommend remediation aligned with security standards and industry best practices.

• Act as an internal security consultant partnering with business units, technology teams, suppliers, stakeholders, and partners to guide secure architecture decisions.

• Collaborate with global subject matter experts to modernize SDLC platforms, deployment automation, cloud integrations, and SaaS tooling.

Key Responsibilities

Security Architecture Assessments

• Lead SecDesign deep-dive sessions with assessment requestors and project stakeholders.

• Identify, assess, and prioritize security risks based on business impact.

• Deliver actionable security requirements and recommendations across:

• Authentication, authorization, and auditing

• Application security, including:

• Session controls

• Penetration testing findings

• Input validation

• Secure data storage and transmission.

• Network security architecture and best practices.

• Cloud security principles, patterns, and controls.

Architecture Governance & Reference Models

• Review and update security reference architectures and blueprints.

• Participate in Operational Risk and Technology Risk governance forums.

• Contribute to modern architecture patterns across:

• Cloud platforms

• Applications

• Technology platforms

Technology Enablement

• Collaborate with global SMEs to evolve SDLC tooling and deployment automation strategies.

• Influence next-generation development and deployment platforms across diverse technology stacks.

• Identify strategic technology investments that enhance enterprise security posture.

Required Skills & Experience

Security Architecture Expertise

• Deep knowledge of security vulnerabilities across:

• Applications

• Networks

• Platforms

• Cloud environments

• Ability to translate complex security risks into developer-friendly guidance.

• Extensive experience conducting:

• Information Security assessments

• IT Security assessments

• Audit assessments

• Experience delivering security findings and gaining stakeholder alignment.

• Strong ability to analyze and review:

• Technical designs

• Architecture diagrams

• Functional requirements

for security implications.

Soft Skills

• Exceptional communication skills, including:

• Written communication

• Verbal communication

• Presentations

• Active listening

• Ability to influence technical and business stakeholders through clear, fact-based recommendations.

• Strong time-management skills with the ability to manage multiple assessments simultaneously.

• Ability to execute and deliver under tight timelines, including senior management engagements.

• Ability to tailor communication of technical risks versus business risks based on audience needs.