Cybersecurity Architect

Manulife • Boston, MA

8d • CA$113,000 - CA$163,000 • Hybrid

About The Position

The Cybersecurity Architect supports projects that apply new and existing technologies and solutions to meet cybersecurity business needs for the US business segment. Working with architects, engineers, technical subject matter experts, and operational support staff across IT and other business units, the Architect develops and maintains solutions that satisfy business and technical requirements. The role also contributes to technology roadmaps and documentation, serves as a subject matter expert across domains such as Identity and Access Management (IAM), SIEM integration, and incident-response automation, and maintains a broad understanding of the information security landscape.

The Architect contributes to cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities. The role designs and guides security architectures and enterprise solutions across modern and legacy environments; develops reusable reference architectures and implementation patterns; reviews proposed solutions; evaluates technologies and suppliers; and partners with technical and business stakeholders to deliver secure, resilient, and supportable solutions. It also provides architecture expertise for security investigations and incident response, translating vulnerabilities, alerts, and threat intelligence into guidance and risk-mitigation strategies. Hands-on technical guidance and architecture validation are part of the work, including after-hours participation in response to significant security incidents when required.

The posting describes an existing vacancy. The role is hybrid. Salary ranges listed are $107,450–$199,550 USD for applicants applying in the US and $113,000–$163,000 CAD for the referenced Toronto, Ontario location. Eligible employees may participate in incentive programs with compensation tied to business and individual performance.

Requirements

• Extensive relevant cybersecurity, security engineering, or security architecture experience, typically gained through 7 or more years of professional experience or equivalent demonstrated expertise.
• Strong knowledge of application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation, and security logging.
• Experience designing or supporting enterprise security solutions in areas such as IAM, SIEM/security operations, cloud security, application security, or infrastructure security.
• Experience with threat modeling, security controls, risk mitigation, and secure testing methodologies.
• Understanding of cloud-native architecture, modern application patterns, and infrastructure security principles.
• Working knowledge of security considerations across Windows, macOS, and Linux environments.
• Strong understanding of network protocols, network security concepts, and common enterprise security architecture patterns.
• Experience with SaaS, IaaS, and PaaS environments and cloud security practices using Microsoft Azure, AWS, GCP, or comparable cloud technologies.
• Knowledge of recognized cybersecurity frameworks and practices, such as NIST.
• Hands-on technical capability with scripting, operating-system tooling, troubleshooting, and security configuration sufficient to support architecture validation and complex solution design.
• Understanding of modern software development lifecycles and how security is incorporated into Agile and iterative development practices.
• Strong written and verbal communication skills, including the ability to explain security requirements, risks, architecture decisions, and trade-offs to technical and non-technical stakeholders.

Nice To Haves

• Familiarity with incident-response tooling and digital-forensics concepts.
• Experience with secrets management, security monitoring, SIEM, and related enterprise security technologies.
• Experience supporting security architectures in a large, complex, or regulated enterprise environment.
• Familiarity with security automation, DevSecOps, or related approaches for integrating security into technology delivery.
• Security certifications such as CISSP or other relevant cybersecurity certifications.
• Bachelor’s degree in computer science, cybersecurity, engineering, information systems, or a related discipline, or equivalent practical experience; a master’s degree in a relevant discipline is an asset.

Responsibilities

• Contribute to cybersecurity strategies, architecture standards, and technology roadmaps aligned with Zero Trust principles and business priorities.
• Design and guide security architectures across IAM, SIEM and security operations, cloud security, application security, and incident-response automation.
• Design enterprise solutions with appropriate security controls and risk-mitigation strategies across modern and legacy technology environments.
• Lead and contribute to conceptual, solution, and component-level security architectures, and develop reusable reference architectures and implementation patterns.
• Review solution architectures and guide architects and engineering teams in aligning solutions with security standards and architecture principles.
• Evaluate third-party technologies, platforms, suppliers, and emerging security capabilities and provide recommendations based on security, architecture, and business requirements.
• Partner with architects, engineers, security teams, technology operations, and business stakeholders to design secure, resilient, and supportable solutions.
• Assess vulnerabilities, security alerts, and threat intelligence and translate emerging threats into architecture guidance and risk-mitigation strategies.
• Support security investigations and incident-response activities with architecture and technical expertise.
• Maintain awareness of cybersecurity technologies, industry practices, and threat trends and incorporate relevant developments into security strategy and architecture.
• Build relationships with internal and external technology stakeholders and communicate security requirements, architectural decisions, risks, and trade-offs.
• Provide hands-on technical guidance and support for security solutions and architecture validation, including after-hours response to significant security incidents when required.

Benefits

• Eligible employees may receive customizable health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage.
• Adoption, surrogacy, and wellness benefits, and employee/family assistance plans.
• Retirement savings plans, including a pension and a global share ownership plan with employer matching contributions.
• Financial education and counseling resources.
• Paid time off in Canada, including holidays, vacation, personal, and sick days, and statutory leaves of absence.
• Incentive programs with compensation tied to business and individual performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed