Senior Security Architect

Type de poste:
Permanent

À la recherche d'une carrière épanouissante qui changera réellement votre vie et celle des autres? Vous êtes au bon endroit.

À titre de partenaire national en solutions de santé, nous plaçons les gens au cœur de tout ce que nous faisons - en commençant par notre équipe de plus de 8 000 employés et employées qui mettent à profit leurs expériences personnelles et professionnelles diversifiées dans le cadre de leur travail à Medavie. Par l'entremise de la collaboration et de l'innovation, notre équipe crée des solutions d'assurance, de soins primaires et de services médicaux d'urgence à l'avant-garde de l'industrie qui viennent en aide à des millions de Canadiens et Canadiennes chaque année.

Notre mission est d'améliorer le bien-être de la population canadienne afin que chaque personne puisse profiter pleinement de la vie, et cela se reflète dans notre culture d'entreprise primée. Nous célébrons l'individualité des membres de notre personnel et accordons de la valeur à la diversité de leurs points de vue et de leurs compétences. C'est pourquoi en plus de vous offrir une rémunération concurrentielle et une gamme complète d'avantages sociaux, nous vous donnons accès à des possibilités de croissance professionnelle et personnelle, à des modalités de travail flexibles, à des expériences enrichissantes, ainsi qu'à un leadership bienveillant. À Medavie, chaque personne peut donner le meilleur d'elle-même, se sentir à sa place et atteindre son plein potentiel. Joignez-vous à nous en postulant un poste dès aujourd'hui.

The Opportunity:

The Senior Security Architect is a strategic technical leader responsible for designing, implementing, and governing enterprise-wide security architectures that protect the organization's information assets, infrastructure, and applications.

This role partners closely with business leaders, technology teams, and risk management functions to ensure security capabilities are aligned with business objectives, regulatory requirements, and modern threat landscapes.

The Senior Security Architect provides deep expertise across security domains-including cloud, identity, network, data protection, application security, and zero trust-and drives the adoption of secure design principles across the enterprise

technology ecosystem.

Key Responsibilities:

Strategic Security Architecture:

• Develop and maintain the enterprise security architecture roadmap aligned with corporate security strategy and business goals.
• Establish security reference architectures, patterns, and standards covering on- premises, cloud, and hybrid environments.
• Lead architectural assessments for new technologies, platforms, and major initiatives.

Design, Engineering & Implementation:

• Architect secure solutions across cloud (Azure/AWS), applications, data, and networks.
• Define security controls and requirements for system designs, integrations, and third-party technologies.
• Review technical designs and solution architectures to ensure adherence to security best practices and compliance requirements.

Sec urity Governance, Risk & Compliance:

• Ensure alignment with regulatory, privacy, and internal policy requirements (e.g., ISO 27001, NIST CSF, SOC 2, PCI-DSS, Personal Health Information Acts).
• Partner with risk, compliance, and audit functions to assess security posture and identify architectural gaps.
• Create and maintain security documentation, architectural diagrams, and standards.

Collaboration & Leadership :

• Serve as a senior advisor to IT, engineering, and business leaders on secure architecture and emerging threats.
• Lead cross-functional architecture reviews and security design workshops.
• Mentor engineering and security staff, promoting security-by-design across the organization.

Threat Modeling & Emerging Technologies:

• Lead threat modeling and architectural risk assessments for critical systems and new initiatives.
• Monitor industry trends, threat intelligence, and technology advancements to evolve security architecture.
• Evaluate and recommend new security technologies and capabilities.

Required Qualifications:

Education: Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field. Masters preferred.

Experience:

• 8-12+ years of experience in cybersecurity with at least 5 years in architecture-level roles.
• Proven experience designing and securing cloud, hybrid, and enterprise-class environments.

Certifications:

• CISSP (Certified Information Systems Security Professional)
• TOGAF (or equivalent enterprise architecture certification)

Other Qualifications:

• Ability to design end-to-end security architectures (application, infrastructure, identity, data, network) from requirements through implementation.
• Strong command of security principles: least privilege, defense-in-depth, secure-by-design/default, separation of duties, trust boundaries, threat modeling concepts.
• Able to produce architecture artifacts: reference architecture, solution designs, security patterns, exception/risk acceptances, and architecture decision records (ADRs).
• Deep understanding of authentication and authorization models (SSO, federation, OAuth2/OIDC, SAML, Kerberos where relevant).
• Privileged access concepts (PAM), role/attribute-based access (RBAC/ABAC), conditional access, identity lifecycle and governance basics.
• Familiarity with MFA patterns, device posture, session controls, and identity as the primary control plane. • Proven experience securing workloads in Azure / AWS / GCP (pick one as minimum; multi-cloud as preferred).
• Core cloud security concepts: shared responsibility model, segmentation, security groups/NSGs, KMS/key management, secrets management, logging/monitoring, cloud-native IAM.
• Understanding of hybrid connectivity patterns and security (VPN/ExpressRoute/DirectConnect equivalents, routing, DNS).
• Solid grounding in network security architecture: segmentation, firewalls, WAF, DDoS protections, proxies, secure remote access, DNS security.
• Understanding of TLS/PKI basics, certificate lifecycle, and secure connectivity patterns.
• Ability to advise and design for secure SDLC: security requirements, design reviews, CI/CD security controls, dependency management, code scanning concepts.

Preferred/Assets:

• Strong security architecture across two or more cloud providers. • Deep understanding of cloud landing zones, guardrails, policy-as-code, and centralized identity patterns.
• Practical experience implementing Zero Trust concepts: identity-centric access, continuous verification, device trust, micro-segmentation, adaptive access.
• Experience with SSE/SASE models (secure web gateway, CASB, ZTNA) and enterprise proxy strategy.
• Familiarity with workload identity and supply chain security for containers.
• Strong CI/CD security patterns: SAST/DAST/IAST, SBOM, dependency governance, artifact signing, policy gates.
• Familiarity with supply chain frameworks (e.g., SLSA concepts) and secure build pipelines.
• Ability to drive automation: policy-as-code, infrastructure-as-code guardrails (Terraform/ARM/Bicep concepts), automated compliance evidence.
• Scripting familiarity (PowerShell/Python) for security enablement and control validation.
• Deeper crypto knowledge: HSM design, envelope encryption patterns, rotation strategies, mTLS at scale, certificate automation.
• Experience designing enterprise key management strategy (centralized vs distributed, BYOK/HYOK patterns where relevant).
• Experience mapping security architecture to regulated requirements (e.g., healthcare, financial services, government contracting).
• Evidence-based control design supporting audits and third-party assurance (SOC 2, ISO, etc.).
• Strong alignment with enterprise architecture practices: capability mapping, target state roadmaps, reference architectures, technology standards.
• Proven ability to reduce complexity and technical debt via platform patterns.
• Strong knowledge of adversary tradecraft and mitigations (MITRE ATT&CK mapping, detection-informed architecture).
• Experience designing for resilience against ransomware, credential theft, lateral movement, and abuse of cloud control planes.
• Mentors other architects and engineers; establishes reusable patterns and guardrails.
• Leads cross-domain programs (IAM modernization, secure cloud adoption, data security program, etc.).

Language Skills: English (Spoken and Written) required. French (Spoken and Written) considered an asset

Security Clearance Requirement: In conjunction with our contract with the Federal Government, you will be required to have Reliability Status Clearance (Enhanced Level B). This includes Fingerprinting, Criminal Record Check, Credit Check and you must have resided in Canada for at least 5 years and hold Permanent Resident or Citizenship Status.

What's in it for you?

What makes us a different kind of employer? Our award-winning culture, a team who really cares, unmatched training and support are all dedicated to ensuring you are set up for success.

What we offer:

• Permanent full-time position with strong career growth opportunities.
• Hybrid or remote work arrangements.
• Flexible work environment and work-life balance.
• 100% employer-paid health, dental, and vision benefits (effective Day 1).
• 100% employer-matched Defined Contribution Pension Plan.
• Annual performance-based Incentive Bonus.
• A gifted week of vacation in your first year + optional Vacation Purchase Program.
• Support for professional development, training, and certifications.
• Wellness programs, health resources, and fitness discounts.

Pay Range:
$99,177 - $132,236

#CBM2

#LI-VS1

This posting is for an existing vacancy within our organization / Ce poste est actuellement vacant au sein de notre organisation.

L'échelle salariale de base proposée peut dépendre du dossier de candidature de la personne retenue ou d'autres facteurs professionnels comme les connaissances, les compétences, la qualification, l'expérience et la formation. En plus de recevoir le salaire de base, les employés et employées admissibles de Medavie peuvent participer à divers programmes de bonification fondés sur le rendement. Le versement des paiements associés à ces programmes est discrétionnaire et dépend des résultats individuels et de ceux de l'entreprise.

Nous croyons que les membres de notre personnel doivent représenter les collectivités que nous servons et nous encourageons les personnes de tous les horizons à poser leur candidature. Pour vous offrir la meilleure expérience qui soit, nous vous proposons des mesures d'adaptation pour chacune des étapes du processus de recrutement. Il vous suffit d'en faire la demande à l'équipe de recrutement. Nous nous engageons à veiller à ce que le recrutement, la fidélisation et le perfectionnement des employés et employées, de même que leur rémunération, demeurent équitables, tiennent compte des besoins en matière d'accessibilité et respectent l'ensemble des droits de la personne et des lois sur la protection de la vie privée qui s'appliquent. Nous remercions toutes les personnes qui ont manifesté de l'intérêt pour ce poste. Veuillez noter que nous communiquerons seulement avec les personnes retenues pour une entrevue.

Bien que Medavie puisse utiliser des outils automatisés, y compris l'IA, pour faciliter l'examen des candidatures, les candidats et candidates sont tenus d'effectuer toutes les étapes du processus de recrutement de manière autonome, sans recourir à l'IA, afin de garantir un processus juste et équitable.

Si vous rencontrez des problèmes techniques au cours de votre procédure d'application, veuillez envoyer un courriel à : [email protected] .