Enterprise Architect, Ai Engineering - Security & Compliance

Job DescriptionToast is recruiting on behalf of one of the largest professional services firms in Canada, a global audit, tax and advisory organization with more than 10,000 people across the country. Their AI Engineering team turns emerging AI capabilities into secure, scalable, production-ready applications and platforms used across the firm. As Enterprise Architect, AI Engineering (Security and Compliance), you will lead architecture across the team’s technology portfolio with a focus on security, compliance, risk and production readiness. You will be the key link between AI Engineering and the firm’s broader architecture, security and technology groups, guiding solutions safely into production. This is a full-time role based in Toronto.
Responsibilities
Author and maintain high-level architecture documentation and Technical Architecture Documents covering application, data, integration, cloud infrastructure, network, identity, security, deployment and operations
Ensure new solutions and material changes align with enterprise architecture, cloud, security, data and technology standards
Lead security architecture and production-readiness reviews, identifying required controls, risks and remediation, and coordinating approvals to move solutions into production
Govern vulnerabilities and security findings across applications, infrastructure, containers, dependencies and cloud environments, driving remediation and coordinating mitigating controls, exceptions or risk acceptance
Review significant application, infrastructure, network, platform and AI-related changes for architecture, security and compliance impact
Build and evolve reusable architecture patterns, security controls and guardrails so teams can deliver securely and consistently
Review, select and govern SDLC tooling, including source control, CI/CD, infrastructure-as-code, security scanning, artifact management and deployment tooling
Act as the primary compliance and control reviewer for AI Engineering, maintaining evidence and supporting internal reviews, external assessments, certifications and audits
Partner with engineering, DevOps/SRE, platform and product teams to embed secure-by-design practices across identity, least privilege, network security, secrets management, logging, monitoring and data protection
Assess the security and architecture implications of AI technologies, including models, agents, enterprise data integrations, AI platforms, content-safety controls and third-party services
Track key architecture decisions, risks, exceptions and remediation commitments, and communicate material issues to AI Engineering leadership and enterprise stakeholders
Stay current on cloud, cybersecurity, AI security, enterprise architecture and regulatory developments and translate them into practical standards and controls
Requirements
University degree in computer science, engineering, cybersecurity, information systems or a related discipline
Significant experience in enterprise, solution, cloud or security architecture within complex enterprise environments
Strong experience designing and reviewing production-grade cloud applications and platforms across applications, APIs, data, infrastructure, identity, networking, security and operations
Deep knowledge of cloud security and secure-by-design principles, including identity and access management, least privilege, network security, encryption, secrets management, logging, monitoring and vulnerability management
Experience with Microsoft Azure and cloud-native architecture;
hands-on experience with Azure networking, Entra ID, Key Vault, Application Gateway/WAF, Azure Front Door, Azure Container Apps or Kubernetes, Azure Monitor, Defender for Cloud and Sentinel would be a plus
Strong understanding of modern DevSecOps and SDLC tooling, including source control, CI/CD, infrastructure-as-code, software composition analysis, SAST, container and image scanning and artifact management
Experience with GitHub, Terraform, containers and automated deployment pipelines, plus the ability to assess new tooling for architecture, security and enterprise readiness
Strong understanding of security and compliance frameworks such as NIST-based controls, ISO standards, secure SDLC practices and enterprise technology risk management
Experience supporting architecture, cybersecurity, risk, compliance and audit reviews and producing the documentation and evidence that demonstrates control effectiveness
Experience assessing vulnerabilities, determining risk, identifying mitigating controls and working through risk-acceptance and exception processes
Familiarity with security considerations for generative AI and agentic systems, including enterprise data access, identity, model and service integrations, content safety and governance
Ability to translate complex technical and security topics into clear decisions, risks and recommendations for technical teams and senior stakeholders
Strong collaboration, organizational and written communication skills, with the ability to drive work across multiple enterprise groups
Benefits
Compensation listed on the posting is for base salary. Total compensation includes base salary + annual bonuses.
A comprehensive and competitive total rewards program
Set the security and compliance standards that decide how AI moves into production at one of Canada’s largest professional services firms
Own the architecture behind AI tools used by thousands of professionals and the clients they serve
Shape the guardrails, patterns and tooling every AI Engineering team builds on, so your decisions scale across the whole portfolio
Work at the front edge of AI security, from agentic systems to enterprise data integrations, in a firm building toward a technology-first future
#J-18808-Ljbffr