Security Architect

Venterra Realty•Richmond Hill, ON

11d•Hybrid

About The Position

We are seeking a Security Architect with deep AWS Security expertise to support the design, implementation, and governance of secure cloud and infrastructure environments. This role is part of the Cyber Security team and involves close collaboration with the IT Infrastructure team to embed security-by-default into networks, platforms, and endpoints. The Security Architect will also liaise with Software Engineering and Data Engineering teams. The ideal candidate should possess hands-on engineering expertise combined with architectural expertise, aiming to help teams adopt secure cloud practices while enabling a scalable, resilient infrastructure.

Requirements

5+ years in security engineering with AWS focus.
Strong expertise in security aspects of AWS Organizations and tooling including IAM, Config; GuardDuty; Control Tower; Security Hub; and CloudWatch
Experience creating and enforcing secure configuration baselines.
Proficiency with Terraform or CloudFormation.
Strong networking fundamentals (including VPNs; AWS WAF; & AWS Firewalls)
Experience with CI/CD security and container security.

Nice To Haves

Experience with Control Tower landing zones.
Data security experience including Amazon Macie.
Kubernetes security exposure
Microsoft Sentinel & Defender XDR
Entra ID
Relevant certifications (AWS Security Specialty, CISSP, etc.).

Responsibilities

Define and maintain cloud security reference architecture for AWS.
Design and monitor Cloud & Infrastructure guardrails.
Own and maintain secure configuration baselines.
Be a Subject Matter Expert in AWS Security.
Partner with IT Infrastructure, Software Engineering, and Data Engineering to highlight areas for security improvement and advise on best practices.
Support governance, compliance, and audit readiness.
Contribute to detection and response processes.