Servicenow - Architect

We are currently requesting resumes for the following position : Servicenow - Architect

Resume Due Date : Thursday, June 18 th , 2026 (5:00PM EST)

Number of Vacancies : 2

Level : MP5

Contract Duration : 18 Months

Hours of work: 35 hours

Location : 1908 Colonel Sam Drive, Oshawa (Hybrid – 3 days remote)

Job Overview

• The ServiceNow Architect is responsible for the architecture, design, implementation, and continuous improvement of ServiceNow capabilities focused on Security Incident Response (SIR), Vulnerability Response (VR), and Integrated Risk Management (IRM).
• This role will provide technical and functional leadership to ensure scalable, secure, and sustainable solutions that align with enterprise governance, cybersecurity, risk, and compliance requirements.
• The successful candidate will work closely with Cybersecurity, Risk, Compliance, IT Operations, and delivery teams to define target-state architecture, guide implementations, and drive platform best practices across the ServiceNow ecosystem.
• Lead the end-to-end architecture, solution design, and implementation of ServiceNow SIR, VR, and IRM modules.
• Define scalable and supportable architecture patterns, data models, workflows, integrations, and governance controls for security and risk use cases.
• Collaborate with business stakeholders, cybersecurity teams, risk teams, compliance teams, and technical teams to translate requirements into solution designs.
• Provide architectural guidance for incident response workflows, vulnerability lifecycle processes, risk management frameworks, issue remediation, exceptions management, and policy/compliance processes.
• Establish and maintain platform design standards, guardrails, and best practices to ensure consistency, performance, scalability, and maintainability.
• Design and oversee integrations between ServiceNow and upstream/downstream tools such as security tools, vulnerability scanners, SIEM/SOAR platforms, CMDB, asset systems, and enterprise applications.
• Support roadmap planning and recommend improvements to mature security and risk processes enabled through ServiceNow.
• Ensure solutions align with enterprise architecture, data governance, security, audit, and operational support requirements.
• Provide technical leadership during implementation projects, enhancements, upgrades, and operational sustainment activities.
• Review and approve detailed solution designs, technical configurations, integration patterns, and data flows delivered by developers or implementation partners.
• Support testing strategy, deployment planning, release governance, and transition to operations.
• Drive continuous improvement by identifying opportunities to improve automation, reporting, user experience, process efficiency, and control effectiveness.

Architecture & Solution Design

• Develop target-state and transition-state architecture for ServiceNow SIR, VR, and IRM capabilities.
• Create solution designs for workflows, data models, forms, portals, dashboards, notifications, business rules, integrations, and role-based access.
• Define patterns for risk registers, issues, controls, policy exceptions, remediation tracking, and vulnerability response orchestration.
• Ensure appropriate use of CMDB, CI relationships, asset data, and service context to support security and risk use cases.

Process Design & Implementation

Design and optimize processes for:

• Security incident intake, triage, investigation, containment, and remediation
• Vulnerability identification, prioritization, assignment, remediation, and exception management
• Risk identification,

Qualifications

ServiceNow Platform & Architecture

• Minimum of 3 years of hands on experiences with SIR/VR/IRM , guiding and reviewing vendor implementations
• Strong understanding of ServiceNow platform architecture, data model, and application framework
• Experience designing scalable solutions across SIR (Security Incident Response), VR (Vulnerability Response), and IRM
• Ability to define end-to-end solution architecture (workflows, forms, integrations, reporting)

Security & Risk Domain Knowledge - Deep understanding of:

• Security incident lifecycle (triage → containment → resolution)
• Vulnerability management lifecycle (identify → prioritize → remediate → exception handling)
• Risk management concepts (risk register, controls, issues, policy/compliance)
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) is a strong asset

Process Design & Implementation - Experience designing and optimizing:

• Incident response workflows
• Vulnerability remediation processes
• Risk and compliance processes
• Strong alignment to ITIL and risk governance best practices
• Integration & Data Management

Hands-on experience with:

• REST APIs, web services, and integrations
• Data ingestion, normalization, and reconciliation
• Integrating with tools such as vulnerability scanners, SIEM/SOAR, CMDB, and asset systems