Cloud Solution Architect – Application Security

Location Address
:
Hybrid - Toronto/Scarborough – 2 days/week split between the 2 locations

Subject to change
: 3–4 days onsite may be required based on business needs

Contract Duration
: 6 months with high Possibility of extension & conversion to FTE

Business Group
:
Cloud & Platform Engineering - integrating application security vulnerability detection tools used by the Bank for static code analysis and SBoM generation

The incumbent is responsible for supporting and upholding the Bank’s application change control standards. The Solution Architect will be responsible for designing, developing, and implementing comprehensive IT solutions that meet the requirements of Application Security within the bank. This role requires a deep understanding of various technologies, excellent problem‑solving skills, and the ability to collaborate effectively with both technical and non‑technical stakeholders.

Supporting several projects – DAST, SCA, SBOM, vulnerability reporting management and others as needed in cloud and App Sec.

• 7+ years of experience in IT architecture, solution design, and implementation.
• 2+ years’ experience in networking and IT security best practices.
• 5+ years’ experience with multiple design patterns (microservices, APIs, enterprise integration patterns).

• TOGAF an asset.
• Hands‑on development experience in python or java.
• Application Security experience.
• 2+ years’ experience with cloud architecture on enterprise-scale projects (e.g. multi‑cloud, hybrid deployments).

Ideal candidate can demonstrate they are a self‑starter who takes initiative, ideally someone who started as a Dev/engineer who worked up to solution architect, has good experience with cloud architecture on enterprise‑scale projects and any large‑scale enterprise architecture experience – candidate should be able to explain a larger piece of architecture they were involved in and not just a small piece.

Someone who can identify security best practices, vs. just security analysts from a process perspective vs. enterprise integration specialist.

Cloud – doesn’t need someone who can design clusters but needs an understanding of how it works.

Someone who has architected and implemented at enterprise level would understand how it works.