senior security architect.

We are seeking a highly accomplished Senior Security Architect for an enterprise-level contract opportunity based in Toronto. In this role, you will take on a premier strategic leadership capacity within cyber security, cloud architecture, and risk management streams, specializing in designing secure reference architectures, evaluating complex solution designs, and establishing robust security controls across hybrid cloud environments.

As a principal security architect, you will bridge the gap between technical infrastructure teams, business stakeholders, and executive leadership. Operating within a hybrid work model, you will lead threat modeling assessments using frameworks such as STRIDE, PASTA, and MITRE ATT&CK, identify security posture gaps, and guide the implementation of security patterns across multi-tier application ecosystems. This position is tailored for a certified security authority (e.g., CISSP-ISSAP, CCSP, GDSA) who can formulate enterprise security blueprints, manage high-visibility risk reduction initiatives, and articulate complex security concepts to diverse audiences.

Location: Toronto, ON

Assignment Type: Hybrid

Contract Duration: 6-month contract and potential for extension

Advantages
High-Impact Architecture Scope: Direct target-state enterprise security reference architectures, cloud controls, and technical patterns.

Advanced Threat Modeling: Apply cutting-edge threat modeling methodologies (STRIDE, PASTA, MITRE ATT&CK) to de-risk complex solutions.

Multi-Cloud & On-Prem Stack: Evaluate and secure diverse architectures across public cloud service models (IaaS/PaaS/SaaS) and on-premises infrastructure.

Flexible Hybrid Model: Enjoy a balanced working arrangement combining onsite collaborative leadership in Toronto with remote flexibility.

Responsibilities
Develop, maintain, and publish security reference architectures, network diagrams, security patterns, and technical guidelines aligned with enterprise standards.

Conduct comprehensive security architecture reviews, threat modeling, and vulnerability assessments on proposed IT solutions, data flows, and technology designs.

Formulate actionable security requirements and advise project teams on cloud security controls throughout full software development lifecycles.

Evaluate the placement and efficacy of security controls across cloud service models (IaaS, PaaS, SaaS) and hybrid infrastructure environments.

Perform gap analyses comparing current-state security postures against industry frameworks (NIST, ISO 27001/2), best practices, and regulatory mandates.

Act as a lead security SME, managing multiple security initiatives simultaneously and delivering status updates to executive leadership.

Define and integrate security controls spanning operating systems, network perimeters (LAN/WAN, firewalls, IDS/IPS), PKI, identity and access management (IAM), malware defense, and role-based access control (RBAC).

Identify, document, and escalate architectural security risks, ensuring application management and quality standards are maintained.

Author executive-level briefing decks, technical reports, and architectural blueprints to guide strategic decision-making.

Qualifications
Core Requirements & Mandatory Certifications
IT Security Tenure: 10+ years of progressive experience in IT security principles, practices, technologies, programs, and procedures with deep expertise in cloud architecture and security controls.

Mandatory Professional Certification: Active credential in cyber security or cloud security architecture, such as:

Certified Information Systems Security Architecture Professional (CISSP-ISSAP)

Certified Cloud Security Professional (CCSP)

GIAC Defensible Security Architecture (GDSA)

Threat Modeling Expertise: 5 to 7 years of hands-on experience applying threat modeling frameworks (STRIDE, PASTA, MITRE ATT&CK), developing data flow diagrams, and mapping attack vectors.

Security Controls & Gap Analysis: 5 to 7 years of extensive experience evaluating cloud and on-premises security controls, identifying architecture gaps, and proposing mitigations.

Executive Presentations & Reporting: 5+ years of experience authoring technical reports, security assessments, and executive presentation decks for senior management.

Preferred Certifications & Assets
Enterprise Architecture Frameworks: Certifications or working knowledge of TOGAF, SABSA, Zachman, or ArchiMate frameworks are considered strong assets.

Information Security Standards: Deep understanding of enterprise frameworks including NIST CSF and ISO 27001/2.

Public Sector Context: Prior experience in a public sector or enterprise government environment is preferred.

Soft Skills & Professional Attributes
Autonomy & Strategic Execution: High degree of self-direction to set objectives, manage competing priorities, and drive security roadmaps.

Communication & Stakeholder Management: Superior written and verbal communication skills with a proven ability to translate complex security risks into business impacts for both technical and non-technical stakeholders.

Collaboration: Strong team-first orientation with a track record of building positive, cross-functional working relationships.

Summary
If you're interested in the "Senior Security Architect" role based in Toronto, we encourage you to apply online at
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to View email address on randstad.com to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies. show more