Principal Cloud Security Architect, Global Security

RBC • Toronto, ON

61d

About The Position

The Principal AWS Cloud Security Architect will be responsible for design, implementation, and delivery of cloud security architecture solutions for complex AWS environments. The ideal candidate will have deep technical expertise in cloud security, infrastructure architecture, and threat modelling to own security initiatives from conception through completion. You will be supporting public cloud adoption by providing security focused opinions, recommendations and know-how, while being mindful of business operations to Safeguard RBC data, brand and values. What will you do? · Design and implement secure, scalable production systems in AWS with deep understanding of cloud-native security controls · Own security architecture initiatives end-to-end, from requirements gathering through deployment and validation · Participate in comprehensive threat modelling exercises for cloud applications and infrastructure · Architect security solutions for containerized environments and Infrastructure as Code (IaC) implementations · Design and implement network security architectures, including firewalls, intrusion detection systems, and zero-trust models · Develop and deploy security automation, monitoring, and incident response capabilities in cloud environments · Create and maintain security standards, frameworks, and best practices documentation · Perform hands-on security assessments and implement remediation solutions for complex cloud architectures · Serve as subject matter expert on AWS security services and cloud security best practices · Provide technical mentorship to engineers and junior architects on secure cloud practices · Evaluate and implement emerging cloud security technologies and methodologies · Collaborate with development teams to integrate security into CI/CD pipelines and DevSecOps practices What do you need to succeed? Must Have: · Bachelor's degree in Computer Science, Information Security, or related field · 10+ years of experience in information security with 5+ years focused on cloud security architecture · Proven experience architecting and securing production systems in AWS at enterprise scale · Strong background in network security architecture and control engineering principles · Hands-on experience with containerization technologies (Docker, Kubernetes) and IaC tools (Terraform, CloudFormation) · Experience conducting threat modeling and security risk assessments · Demonstrated ability to own and deliver complex technical initiatives independently · Ability to partner effectively with key stakeholders on complex projects with excellent communication, facilitation and presentation skills · Cloud and Industry security certifications; AWS Professional-Level Certifications (Solutions Architect Professional, DevOps Engineer Professional), AWS Certified Security – Specialty, OSCP (Offensive Security Certified Professional) certification · Experience with penetration testing and red team exercises · Background in security research or vulnerability assessment What’s in it for you? We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual. · A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable · Leaders who support your development through coaching and managing opportunities · Ability to make a difference and lasting impact · Work in a dynamic, collaborative, progressive, and high-performing team · A world-class training program in financial services · Flexible work/life balance options · Opportunities to do challenging work

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• 10+ years of experience in information security with 5+ years focused on cloud security architecture
• Proven experience architecting and securing production systems in AWS at enterprise scale
• Strong background in network security architecture and control engineering principles
• Hands-on experience with containerization technologies (Docker, Kubernetes) and IaC tools (Terraform, CloudFormation)
• Experience conducting threat modeling and security risk assessments
• Demonstrated ability to own and deliver complex technical initiatives independently
• Ability to partner effectively with key stakeholders on complex projects with excellent communication, facilitation and presentation skills
• Cloud and Industry security certifications; AWS Professional-Level Certifications (Solutions Architect Professional, DevOps Engineer Professional), AWS Certified Security – Specialty, OSCP (Offensive Security Certified Professional) certification

Nice To Haves

• Experience with penetration testing and red team exercises
• Background in security research or vulnerability assessment

Responsibilities

• Design and implement secure, scalable production systems in AWS with deep understanding of cloud-native security controls
• Own security architecture initiatives end-to-end, from requirements gathering through deployment and validation
• Participate in comprehensive threat modelling exercises for cloud applications and infrastructure
• Architect security solutions for containerized environments and Infrastructure as Code (IaC) implementations
• Design and implement network security architectures, including firewalls, intrusion detection systems, and zero-trust models
• Develop and deploy security automation, monitoring, and incident response capabilities in cloud environments
• Create and maintain security standards, frameworks, and best practices documentation
• Perform hands-on security assessments and implement remediation solutions for complex cloud architectures
• Serve as subject matter expert on AWS security services and cloud security best practices
• Provide technical mentorship to engineers and junior architects on secure cloud practices
• Evaluate and implement emerging cloud security technologies and methodologies
• Collaborate with development teams to integrate security into CI/CD pipelines and DevSecOps practices

Benefits

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Flexible work/life balance options
• Opportunities to do challenging work

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level