Senior Security Architect

TMX Group•Toronto, ON

2d•CA$140,000 - CA$150,000•Hybrid

About The Position

TMX is seeking a highly skilled and strategic Security Architect to define enterprise technical guardrails and overarching security blueprints. This role champions the enterprise shift from implicit network trust to a robust Zero Trust Architecture. By developing reusable architectural templates, the Security Architect will enable engineering teams to rapidly deploy secure infrastructure while minimizing design-time friction. This is a key collaborator role across internal security disciplines and external enterprise teams, integrating secure frameworks seamlessly into the overarching technology strategy.

Requirements

Post-secondary degree or diploma in Computer Science, Information Management, or a related technical field.
5+ years of dedicated experience in an information security-focused role, with a strong track record across security risk, design, or management.
5+ years of experience managing and designing complex cloud solutions, with deep proficiency primarily in AWS, GCP, and Azure.
3+ years of experience operating in a dedicated IT Architecture role.
Proven, applied knowledge of TOGAF models and the Zachman framework.
Demonstrated success managing the complete lifecycle of technology solutions from initial ideation to ultimate sunsetting.
Excellent written and verbal communication skills, with a proven ability to collaborate effectively across multidisciplinary teams.
Self-motivated, flexible, and capable of working both independently and as part of a dedicated, fast-paced team.

Nice To Haves

Relevant industry certifications.

Responsibilities

Author and maintain critical technical requirements for enterprise infrastructure, including Active Directory hardening, Post-Quantum cryptographic posture, and the secure adoption of Generative AI platforms.
Define comprehensive micro-segmentation principles, per-session access controls, and Zero Trust Network Access (ZTNA) requirements across the enterprise.
Develop and maintain a comprehensive repository of pre-approved, reusable architectural templates to accelerate secure project delivery.
Lead the technical security evaluations during M&A due diligence processes and engineer target-state integration blueprints.
Assess emerging capabilities and vendor solutions to ensure the technology stack remains highly resilient against evolving threat vectors.
Transform GRC (Governance, Risk, and Compliance) policies into practical technical standards.
Partner closely with AppSec to establish secure coding standards, and integrate data classification matrices and data movement restrictions from Data Governance into all infrastructure and project designs.