Principal Security Architect

Responsibilities

• Lead security design reviews covering product architecture, changes, and AWS cloud integrations.
• Conduct security code reviews and develop novel security-focused product features.
• Design and document enterprise Hardware Security Module and key-management integration and deployment processes.
• Assess third-party software, SaaS offerings, and their integrations in both design and implementation.
• Oversee internal and third-party security assessments and evaluate the impact of product and third-party vulnerabilities.
• Assess the security impact of emerging technologies, web standards, and browser behavior changes.
• Support compliance and sales teams with technical regulation and RFP input.
• Participate in detailed customer discussions on security topics.
• Assist with patent writing and review.
• Create and review external technical content, including blogs, white papers, and presentations.

Requirements

• Minimum MSc/MEng or equivalent; PhD preferred.
• Advanced knowledge of applied cryptography, including HSMs, TPMs, and key-management lifecycle activities.
• Deep knowledge of web and browser technologies, including Same Origin Policy, XSS, CSRF, security headers, browser architecture, and JavaScript engine internals.
• Thorough understanding of network and operating-system fundamentals, including TCP, TLS, DNS, firewalls, WAFs, DAC/MAC, and sandboxing.
• AWS security experience, including IAM, Organizations, EC2, and VPC.
• Familiarity with static and dynamic analysis concepts and tools.
• Advanced C/C++ knowledge focused on secure coding, plus at least one additional language; Python or JavaScript preferred.
• Willingness to take a hands-on approach to completing the work.

Benefits

• Base salary range is CAD 158,000–263,000.
• Employees may be eligible for stock-based compensation grants and shareholder participation based on company and individual performance.