Principal Security Architect

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Security Architect based in Canada. This role is focused on shaping security architecture across products, cloud infrastructure, integrations, and emerging technologies. You will evaluate complex security designs, conduct code and vulnerability reviews, and help ensure enterprise-grade protection throughout the product lifecycle. The position combines deep technical expertise with hands-on security engineering and strategic architectural guidance. You will work across AWS, web and browser technologies, cryptography, operating systems, networks, and third-party technologies. You will also collaborate with customers, compliance teams, sales teams, and engineering stakeholders on complex security topics. The role provides an opportunity to influence product security, develop innovative security capabilities, and contribute to technical thought leadership. Accountabilities: - Conduct security design reviews covering broad product architecture, individual product changes, cloud infrastructure, and AWS integrations. - Perform security-focused code reviews and identify potential weaknesses, vulnerabilities, and secure coding improvements. - Design and document processes for integrating and deploying enterprise Hardware Security Modules and key management solutions. - Assess third-party software, SaaS providers, and external technologies from a security and architectural perspective. - Review the design and implementation of integrations with third-party software and SaaS platforms, identifying security risks and recommending appropriate controls. - Oversee internal and external security assessments and coordinate technical follow-up on identified findings.

- Perform in-depth analysis of vulnerabilities, assessing the potential impact of both third-party and product-specific security issues. - Monitor emerging technologies, web standards, and browser behavior changes and assess their potential impact on products and security architecture. - Support compliance and sales teams with technical security expertise related to regulations, customer requirements, RFPs, and security questionnaires. - Participate in detailed technical discussions with customers regarding security architecture, controls, vulnerabilities, and product capabilities. - Contribute to patent development through technical invention documentation, review, and collaboration with relevant teams. - Create and review technical materials for external audiences, including security blogs, white papers, presentations, and other technical content. - Collaborate with engineering and R&D teams to develop innovative product features and capabilities within the security domain. - Maintain a strong awareness of evolving cybersecurity threats, technologies, standards, and best practices. Requirements: - Advanced knowledge of applied cryptography, including technologies such as Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs). - Strong understanding of the complete key management lifecycle, including key generation, storage, distribution, backup, rotation, revocation, and destruction. - Deep expertise in web and browser security technologies, including the Same-Origin Policy, XSS, CSRF, security headers, browser architecture, and JavaScript engine internals. - Thorough understanding of networking and operating-system fundamentals, including TCP, TLS, DNS, firewalls, WAFs, discretionary and mandatory access controls, and sandboxing. - Strong AWS security experience, including IAM, AWS Organizations, EC2, VPC, and related cloud security capabilities. - Familiarity with static and dynamic application analysis concepts, methodologies, and tools.