Senior Security Architect

We are seeking an experienced Senior Security Architect to support both strategic and operational cyber security initiatives across enterprise environments. In this dual-focused role, you will mature Cyber Security Incident Response Team (CSIRT) capabilities and drive the hands-on implementation of Zero Trust architecture. You will be responsible for leading incident response coordination, authoring executive briefings, refining incident playbooks, and closing critical security gaps across Identity and Access Management (IAM) and network security domains.

Location: Toronto, ON (Hybrid – Up to 3 days/week onsite)

Duration: 8-month contract.

Advantages
Dual Strategic & Hands-On Scope: Drive high-visibility Zero Trust implementations while managing active incident response workflows.

Advanced Identity & Cloud Stack: Work extensively with Microsoft Entra ID, Conditional Access, PAM/PIM, Defender, Sentinel, and AWS GuardDuty.

AI Threat Landscape Alignment: Direct incident readiness and containment playbooks tailored to counter AI-driven and machine-speed attack vectors.

Flexible Hybrid Model: Balance remote work with collaboration in Toronto up to 3 days per week.

Responsibilities
CSIRT Governance & Program Maturity: Review, update, and standardize incident response policies, playbooks, procedures, and workflows in alignment with industry frameworks such as NIST CSF and ISO 27001.

Incident Coordination & Executive Reporting: Lead and coordinate cross-functional responses to active cyber security incidents, authoring executive briefings, status reports (SITREPs), post-incident reviews, and communication materials for internal and external stakeholders.

Hands-On Zero Trust Implementation: Conduct current-state security architecture assessments, identify control gaps, and directly lead or support the configuration and operationalization of Zero Trust technologies.

Identity & Access Management (IAM) Controls: Implement and optimize identity-focused security controls, including Multi-Factor Authentication (MFA), Conditional Access policies, Role-Based Access Control (RBAC), Privileged Access Management (PAM/PIM), and Entra ID environments.

Network & Micro-Segmentation Architecture: Translate Zero Trust Network Access (ZTNA) principles into operational controls, including network micro-segmentation, secure access models, and perimeter defense strategies.

Incident Readiness for AI-Driven Threats: Support the evolution of incident response playbooks to defend against AI-accelerated threats, automated attack vectors, and machine-speed exploitation.

Cross-Functional Collaboration & Metrics: Define key performance indicators (KPIs), facilitate tabletop exercises, and partner with security operations, cloud engineering, and technical leads to embed security controls into day-to-day operations.

Qualifications
Cyber Security Seniority: 7–10+ years of dedicated experience in cyber security, with a strong background in CSIRT and Security Operations Center (SOC) environments (Strictly Required).

Incident Response Leadership: Proven experience coordinating and managing cyber incidents, leading the full incident lifecycle (triage, containment, recovery, post-incident reviews) and managing cross-functional stakeholder communications (Strictly Required).

Incident Communication & Governance: Demonstrated success authoring executive briefings, incident reports, and developing incident response playbooks, policies, and standards (Strictly Required).

Hands-On Zero Trust Delivery: Proven hands-on experience implementing Zero Trust technologies, conducting security gap analyses, and operationalizing Zero Trust models (Strictly Required).

Identity & Network Security Controls: Direct expertise with identity security controls (MFA, Conditional Access, RBAC, PAM/PIM, Entra ID) and Zero Trust network principles (segmentation, ZTNA) (Strictly Required).

Nice-to-Have Assets:
Prior cyber security experience within a public sector environment.

Professional certifications such as CISSP, CISM, GIAC, or Azure Security Engineer.

Familiarity with healthcare data privacy frameworks (e.g., PHIPA) or SOAR (Security Orchestration Automation and Response) platforms.

Summary
If you're interested in the "Senior Security Architect" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.