Senior Security Delivery Solution Architect II

Summary

Our Security Professional Services delivery team has an immediate need for a highly experienced and motivated Security Delivery Solution Architect (DSA) to lead the design, development, and implementation of complex cybersecurity solutions for major Canadian federal government clients. As a key technical authority, you will be responsible for translating intricate government security requirements into robust, compliant, and effective security architectures. You will act as the primary technical interface between our clients and delivery teams, ensuring that solutions not only meet but exceed the stringent security mandates of the Government of Canada (GoC).

Key Responsibilities

•    Solution Architecture & Design:
o    Lead the end-to-end architectural design of security solutions covering cloud, network, identity, data, and application security domains.
o    Translate client business objectives and security requirements into detailed technical specifications, including High-Level Designs (HLDs) and Low-Level Designs (LLDs).
o    Ensure all solutions are designed in strict alignment with Government of Canada standards and frameworks, including ITSG-33, ITSG-22, and the Profile-Based Mission Management (PBMM) model.
o    Develop and present architecture diagrams, roadmaps, and technical proposals to both technical and executive-level stakeholders.

•    Technical Leadership & Delivery Oversight:
o    Serve as the senior technical expert and trusted advisor for all security aspects of the project lifecycle.
o    Provide technical guidance and mentorship to engineering and implementation teams throughout deployment, integration, and testing phases.
o    Oversee the successful delivery of security solutions, ensuring they are completed on schedule, within budget, and to the client's satisfaction.
o    Lead the resolution of complex technical challenges and integration issues.

•    Client Engagement & Pre-Sales Support:
o    Collaborate with federal government clients to understand their unique security challenges, operational constraints, and strategic goals.
o    Contribute technical expertise to RFPs, proposals, and Statements of Work (SOWs), ensuring proposed solutions are viable, competitive, and compliant.
o    Build and maintain strong, long-term relationships with client stakeholders, establishing credibility and trust.

•    Compliance & Risk Management:
o    Ensure all architectural solutions successfully meet GoC security controls and are prepared for the Security Assessment & Authorization (SA&A) process.
o    Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities in proposed designs.
o    Create and maintain comprehensive documentation required for security audits and compliance verification.

Critical Qualifications

•    Security Clearance: Must currently hold, or be eligible to obtain, a Government of Canada Secret (Level II) or Top Secret security clearance. Canadian Citizenship is a mandatory prerequisite for this clearance.
•    Experience:
o    10+ years of progressive experience in the IT security field.
o    5+ years in a dedicated security architecture or senior consulting role.
o    Demonstrable experience designing and delivering large-scale security solutions for Canadian federal government departments or agencies (e.g., SSC, DND, CSE, TBS).
•    GoC Expertise: Deep, hands-on knowledge of Government of Canada security frameworks, including:
o    ITSG-33 (IT Security Risk Management: A Lifecycle Approach)
o    ITSG-22 (Baseline Security Requirements for Network Security Zones)
o    PBMM (Profile-Based Mission Management)
o    GoC Cloud Guardrails and Secure Cloud Adoption strategies.
•    Technical Proficiency: Expert-level knowledge across multiple security domains:
o    Cloud Security: AWS, Microsoft Azure (including Azure Government Canada).
o    Network Security: Firewalls, IDS/IPS, VPNs, segmentation, SASE.
o    Identity & Access Management (IAM): PKI, MFA, PAM, SSO, Federation.
o    Security Operations: SIEM/SOAR, EDR/XDR, Threat Intelligence.
o    Data Security: Data Loss Prevention (DLP), encryption, data classification.
•    Certifications: Must hold a senior industry certification such as CISSP, CISM, or CCSP.
•    Communication: Exceptional written and verbal communication skills, with the ability to articulate complex technical concepts to diverse audiences.
•    High level of personal integrity, and the ability to professionally handle confidential matters and demonstrate a high level of judgment and maturity.
•    High degree of initiative, dependability, and ability to work with little supervision.

Preferred Qualifications

•    Bilingualism: Fluency in both English and French is a significant asset.
•    Advanced Certifications: CISSP-ISSAP (Information Systems Security Architecture Professional), TOGAF, SABSA, or cloud-specific security certifications (e.g., Azure/AWS Security Specialty).
•    DevSecOps: Experience integrating security controls and practices into CI/CD pipelines.
•    Zero Trust: Practical experience designing and implementing Zero Trust Architectures
•    Experience in business continuity planning, auditing, and risk management