RQ11205 - Technology Architect - Senior

Maarut•Toronto, ON

21h•Onsite

About The Position

The Senior Technology Architect role requires deep knowledge, expertise, and experience in cyber security solutions, security operations (SecOps) solutions and practices, automation and artificial intelligence (AI) in cyber security, managed security services, and next-generation network security. The resource also requires hands-on experience in analyzing, configuring, implementing, and troubleshooting cyber security models, automation solutions and threat detection, particularly within the education sector, preferably in the Ontario K–12 school board environment. This resource is responsible for, but not limited to: Providing technical leadership and guidance on cyber security architecture, security operations, AI-enabled security, and next-generation network technologies. Designing, implementing, and supporting security solutions including Cloud Security, Identity Security, Endpoint Security, SASE/SSE, SIEM, SOAR, and XDR. Developing and implementing AI-enabled security capabilities, including security automation, AI agents, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and autonomous security operations. Supporting integration of AI platforms with security technologies including SIEM, SOAR, threat intelligence, vulnerability management, and identity security platforms. Assisting with the development, testing, and deployment of AI-based security use cases, playbooks, and operational workflows. Assisting in the development of AI integration tools for pre-emptive security, namely Threat intelligence and Vulnerability insight Providing subject matter expertise, tactical and operational advice, consultancy, and training on all aspects of cyber security, AI-enabled security, and network solutions such as: Cyber security solutions to protect, detect, and respond to cyber threats Cloud security solutions Using MITRE ATT&CK, D3FEND, and ATLAS frameworks in security operations AI-assisted SecOps practices, including agentic AI, autonomous security operations, and human-in-the-loop controls AI governance, responsible AI adoption, and risk-informed use of AI in cyber security Various vendor-specific cyber security, AI, and network solutions Designing, implementing, and integrating security technologies, telemetry pipelines, orchestration tools, and automated workflows supporting SecOps and MSS service integration, including: SIEM/SOAR/Agentic AI integration and engineering support Telemetry ingestion, normalization, and correlation pipelines Security tooling integration across hybrid environments Automation of MSS workflows and operational processes Executing and maintaining continuous automated red teaming (CART) platforms (e.g., SCYTHE, Caldera, AttackIQ), and integrating outputs into detection tuning, control validation, and playbook optimization Monitoring and reporting on security operations performance, including development of dashboards, KPIs/KRIs, and MSSP performance metrics to support continuous improvement Collaborating with MSSPs and internal stakeholders to optimize workflows, improve detection logic, and support service modernization toward AI-enabled operating models Delivering technical training, stakeholder engagement, and operational guidance to support cyber resilience and continuous improvement. Presenting technical findings, risk insights, and strategic recommendations to senior leadership and stakeholders Providing regular status updates and project reporting on deliverables, milestones, and performance outcomes Applying a collaborative approach to solution design, development, and implementation across diverse stakeholder groups Aligning with industry and legislative advancements at the federal, provincial/local level (e.g., Enhancing Digital Security and Trust Act, 2024 (EDSTA)). Delivering on other duties as assigned. This work involves working in close partnership with various government departments, the K-12 education sector, telecommunications providers, and network and cyber security technology vendors to develop tailored approaches and implementation plans. To support various stakeholders, the resource must be available to perform hands-on configuration, troubleshooting and training at the client site. Therefore, the resource must be available to travel same day or overnight in Ontario, as needed. The unit manager may assign other related board work for other unit or branch initiatives, as required.

Requirements

5+ years of experience in cyber security solutions and next-generation network security, including hands-on implementation, configuration, and troubleshooting
5+ years of experience in network security and modern architectures (e.g., SDN, SD-WAN, SASE/SSE)
Proven experience designing and implementing enterprise security architectures, including integration of network and security controls (e.g., Zero Trust, SASE, cloud security)
Strong knowledge and practical application of security frameworks and models (NIST CSF v2, CIS Controls v8, MITRE ATT&CK, D3FEND, ATLAS)
Experience designing and implementing security automation and orchestration workflows
Hands-on experience with AI-enabled security operations and security analytics.
Experience with Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and AI governance.
Bachelor’s degree in computer science, cyber security, or a related field.
5+ years of experience in cyber security solutions and next-generation network security, including hands-on implementation, configuration, and troubleshooting
5+ years of experience in network security and modern architectures (e.g., SDN, SD-WAN, SASE/SSE), preferably within Ontario K–12 environments
Proven experience designing and implementing enterprise security architectures, including integration of network and security controls (e.g., Zero Trust, SASE, cloud security)
Proven hands-on experience implementing and supporting: Cloud-based security architectures (SSE/SASE including SWG, CASB, FWaaS, ZTNA), Zero Trust Architecture (ZTA), Cloud security platforms (e.g., Azure, AWS, Google Cloud), Endpoint security (EPP, EDR, XDR), Identity and access management (passwordless, MFA, certificate-based authentication), Incident Response and Incident Management (IR/IM) platforms, Vulnerability management and patching automation, User and Entity Behaviour Analytics (UEBA), Penetration testing and automated red teaming, Operational Technology (OT) security and IT/OT convergence
Strong knowledge and practical application of security frameworks and models (NIST CSF v2, CIS Controls v8, MITRE ATT&CK, D3FEND, ATLAS)
Experience assessing, piloting, and implementing emerging cyber security and network technologies
Experience designing and implementing security automation and orchestration workflows, preferably within Ontario K–12 school boards
Hands-on experience with AI-enabled security operations and security analytics.
Experience with Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and AI governance.
Familiarity with AI security platforms such as Microsoft Security Copilot, OpenAI, Anthropic Claude, Google Gemini, AWS Bedrock, Palo Alto AIRS, Splunk AI Assistant, CrowdStrike Charlotte AI, or similar technologies.
Strong understanding of AI governance and risk management including prompt injection, model security, data protection, and responsible AI practices
5+ years of experience presenting to senior and executive management and external stakeholders.
5+ years’ coordinating and leading complex technical work with multiple IT teams, internal and external stakeholders.
5+ years of experience preparing written materials (e.g., status reports, recommendations, briefing notes) and experience maintaining security content (rules, dashboards, playbooks) across shared platforms.
5+ years of experience delivering cyber security upskilling training to IT and security teams.
Experience supporting cross-organizational collaboration, including knowledge sharing and threat intelligence exchange
Bachelor’s degree in computer science, cyber security, or a related field.
Relevant vendor certifications or equivalent work experience.
Knowledge of Government of Ontario standards (e.g., GO-ITS) and relevant legislation (e.g., EDSTA).
5+ years’ hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.

Nice To Haves

preferably within the Ontario K–12 school board environment
Postgraduate degree (e.g., M.Sc. and/or Ph.D.) in computer science, cyber security or engineering is preferred.
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Cloud Security Professional (CCSP)
Certified Ethical Hacker (CEH)
Certified Information Systems Auditor (CISA)
Certified in Risk and Information Systems Control (CRISC).
Azure security
5+ years’ hands-on experience working in the K-12 education sector, with Ontario K-12 school boards, in particular with school board network, network security and cyber security.

Responsibilities

Providing technical leadership and guidance on cyber security architecture, security operations, AI-enabled security, and next-generation network technologies.
Designing, implementing, and supporting security solutions including Cloud Security, Identity Security, Endpoint Security, SASE/SSE, SIEM, SOAR, and XDR.
Developing and implementing AI-enabled security capabilities, including security automation, AI agents, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and autonomous security operations.
Supporting integration of AI platforms with security technologies including SIEM, SOAR, threat intelligence, vulnerability management, and identity security platforms.
Assisting with the development, testing, and deployment of AI-based security use cases, playbooks, and operational workflows.
Assisting in the development of AI integration tools for pre-emptive security, namely Threat intelligence and Vulnerability insight
Providing subject matter expertise, tactical and operational advice, consultancy, and training on all aspects of cyber security, AI-enabled security, and network solutions.
Designing, implementing, and integrating security technologies, telemetry pipelines, orchestration tools, and automated workflows supporting SecOps and MSS service integration.
Executing and maintaining continuous automated red teaming (CART) platforms (e.g., SCYTHE, Caldera, AttackIQ), and integrating outputs into detection tuning, control validation, and playbook optimization
Monitoring and reporting on security operations performance, including development of dashboards, KPIs/KRIs, and MSSP performance metrics to support continuous improvement
Collaborating with MSSPs and internal stakeholders to optimize workflows, improve detection logic, and support service modernization toward AI-enabled operating models
Delivering technical training, stakeholder engagement, and operational guidance to support cyber resilience and continuous improvement.
Presenting technical findings, risk insights, and strategic recommendations to senior leadership and stakeholders
Providing regular status updates and project reporting on deliverables, milestones, and performance outcomes
Applying a collaborative approach to solution design, development, and implementation across diverse stakeholder groups
Aligning with industry and legislative advancements at the federal, provincial/local level (e.g., Enhancing Digital Security and Trust Act, 2024 (EDSTA)).
Delivering on other duties as assigned.