Solution Architect, Cybersecurity

We are looking for a Security Architect (SA) who will report to the Manager of Enterprise & solution architecture. The SA will primarily work in the design and implementation of robust cybersecurity design in order to protect BRP's infrastructure, applications, data, and users from evolving cyber threats. As part of his/her role, the SA will review and understand the risks and impacts of several business initiatives, in order to develop comprehensive security architectures, and guide secure deployment practices while respecting the guiding principles of the Enterprise Architecture within the actual BRP context. Deep exposure on the latest security tooling such XDR, EDR, SIEM, SOAR is a strong asset.
Responsibilities
Design advanced endpoint protection strategies, Endpoint Detection & Response (EDR), Extended Detection & Response (XDR), endpoint firewall controls, and security coverage for legacy operating systems.
Define security architecture for proactive threat detection and response capabilities, including Managed Detection and Response (MDR), threat hunting programs, advanced threat intelligence integration, incident management workflows, and Security Orchestration, Automation and Response (SOAR).
Design Security Information and Event Management (SIEM) capabilities to support large scale log collection, cyber analytics, and security monitoring, ensuring integration with XDR platforms, threat intelligence feeds, incident response workflows, and long term log retention strategies.
Architect solutions that ensure data confidentiality, integrity, and availability, including encryption mechanisms, secure storage practices, access control policies, and endpoint Data Loss Prevention (DLP) capabilities, in compliance with data protection regulations.
Design cloud security architectures covering cloud workload protection (CWPP), cloud security posture management (CSPM), container security, and cloud native application protection platforms (CNAPP), including integration with cloud based MDR and threat hunting services.
Design solution architecture documents for endpoint, network, infrastructure, cloud, application, identity, OT/IoT, and data security in alignment with BRP goals and industry best practices.
Define secure Identity & Access Management (IAM) frameworks, including multi factor authentication (MFA), single sign on (SSO), Identity Governance & Administration (IGA), Privileged Access Management (PAM), and identity threat protection capabilities to safeguard user identities and access points across enterprise and cloud environments.

Qualifications & Skills
Bachelor's degree in computer science, information systems, cybersecurity, or a related study, or equivalent project related experience.
Minimum of 10 years of experience in IT, with at least seven years in an architecture or senior technical role focusing on security
Relevant cybersecurity certifications (e.g., CISSP, CISM, CEH, CCSP,...).
Experience designing security architectures supporting EDR/XDR platforms, MDR services, threat hunting operations, SIEM analytics platforms, and SOAR driven incident response automation. CrowdStrike exposure is a strong asset
Experience contributing to the production and maintenance of architecture patterns related to SIEM, Identity and Access Management, vulnerability management, exposure management, cloud security, endpoint protection, data protection, and application/network/infrastructure security.
Hands on experience with cloud security platforms and technologies including CSPM, CWPP, CNAPP, container security, and integration of enterprise security platforms such as the Microsoft Security Suite.
Knowledge of Industrial Control Systems (ICS), OT/IoT security architectures, and protection of industrial environments including SCADA, HMI, historian systems, and connected operational assets.
Experience integrating threat intelligence platforms, advanced detection analytics, and automated incident response workflows into enterprise security monitoring capabilities.
Ability to align security initiatives with business objectives, balancing risk mitigation with operational feasibility and organizational priorities.
Excellent communication skills with the ability to explain technical concepts to lay audiences. Some experience of working with leadership level stakeholders.
Ability to communicate with internal and external stakeholders outside of Quebec or unilingual English speaking on a daily basis