Role Overview: We are seeking a highly experienced Solution Architect Application Security Lead to drive the design implementation and governance of enterprise-grade AppSec Zero Trust architecture and regulatory compliance frameworks.
This role will be responsible for embedding security-by-design principles across application lifecycles leading Zero Trust adoption and ensuring alignment with regulatory and industry standards (e.g. PCI-DSS OSFI NIST ISO 27001).
Application Security Strategy & Architecture
Define and implement enterprise-wide AppSec strategy aligned with business and security objectives Architect secure SDLC frameworks.
SAST DAST SCA IAST
API security
Container & cloud-native security
Establish security patterns reference architectures and guardrails for application teams Drive DevSecOps enablement across CI/CD pipelines
Zero Trust Architecture Leadership
Lead the design and rollout of Zero Trust architecture across application ecosystems.
Implement key Zero Trust principles.
Continuous verification
Least privilege access
Micro-segmentation
Integrate with:
Identity & Access Management (IAM/CIAM)
Privileged Access Management (PAM)
Endpoint and workload protection platforms
Align application access controls with identity-centric security models
Compliance & Regulatory Governance
Ensure application security controls meet: OSFI B-13 / B-10 (Canada BFSI) PCI-DSS SOX GDPR ISO 27001 NIST
Drive audit readiness control validation and compliance reporting.
Establish risk-based control frameworks and remediation tracking.
Partner with internal audit risk and compliance teams.
Secure Architecture & Threat Modeling
Conduct secure design reviews and threat modeling (STRIDE ATT&CK).
Identify and mitigate application-layer vulnerabilities and attack vectors.
Define security requirements for APIs microservices and cloud-native applications.
Embed security testing and validation processes.
Engineering & Tooling Enablement
Lead deployment and optimization of AppSec tools.
SAST: Checkmarx Fortify Veracode
DAST: Burp AppScan
SCA: Snyk Black Duck
Container security: Prisma Aqua
Integrate tools into CI/CD pipelines (Azure DevOps GitHub Jenkins).
Drive automation for vulnerability management and remediation tracking.
Stakeholder & Delivery Leadership
Act as a trusted advisor to engineering architecture and business leaders.
Lead cross-functional teams across development DevOps and security.
Provide executive-level reporting on AppSec maturity and risk posture.
Mentor teams on secure coding and security best practices.
Required Qualifications
12 years in cybersecurity application security or architecture roles
Proven experience as a Solution Architect or AppSec Lead in large enterprises (preferably BFSI)
Strong expertise in:
Secure SDLC / DevSecOps
Zero Trust Architecture
Cloud platforms (Azure AWS GCP)
Hands-on experience with AppSec tools and CI/CD integrations.
Deep understanding of:
OWASP Top 10 API Security Top 10
Threat modeling methodologies
Experience with regulatory compliance frameworks (OSFI PCI-DSS ISO NIST)
Preferred Certifications:
CISSP / CISM / CCSP
CSSLP (Certified Secure Software Lifecycle Professional) TOGAF (Architecture) SABSA or equivalent security architecture certifications
Required Skills:
Role Overview: We are seeking a highly experienced Solution Architect Application Security Lead to drive the design implementation and governance of enterprise-grade AppSec Zero Trust architecture and regulatory compliance frameworks. This role will be responsible for embedding security-by-design principles across application lifecycles leading Zero Trust adoption and ensuring alignment with regulatory and industry standards (e.g. PCI-DSS OSFI NIST ISO 27001). Application Security Strategy & Architecture Define and implement enterprise-wide AppSec strategy aligned with business and security objectives Architect secure SDLC frameworks. SAST DAST SCA IAST API security Container & cloud-native security Establish security patterns reference architectures and guardrails for application teams Drive DevSecOps enablement across CI/CD pipelines Zero Trust Architecture Leadership Lead the design and rollout of Zero Trust architecture across application ecosystems. Implement key Zero Trust principles. Continuous verification Least privilege access Micro-segmentation Integrate with: Identity & Access Management (IAM/CIAM) Privileged Access Management (PAM) Endpoint and workload protection platforms Align application access controls with identity-centric security models Compliance & Regulatory Governance Ensure application security controls meet: OSFI B-13 / B-10 (Canada BFSI) PCI-DSS SOX GDPR ISO 27001 NIST Drive audit readiness control validation and compliance reporting. Establish risk-based control frameworks and remediation tracking. Partner with internal audit risk and compliance teams. Secure Architecture & Threat Modeling Conduct secure design reviews and threat modeling (STRIDE ATT&CK). Identify and mitigate application-layer vulnerabilities and attack vectors. Define security requirements for APIs microservices and cloud-native applications. Embed security testing and validation processes. Engineering & Tooling Enablement Lead deployment and optimization of AppSec tools. SAST: Checkmarx Fortify Veracode DAST: Burp AppScan SCA: Snyk Black Duck Container security: Prisma Aqua Integrate tools into CI/CD pipelines (Azure DevOps GitHub Jenkins). Drive automation for vulnerability management and remediation tracking. Stakeholder & Delivery Leadership Act as a trusted advisor to engineering architecture and business leaders. Lead cross-functional teams across development DevOps and security. Provide executive-level reporting on AppSec maturity and risk posture. Mentor teams on secure coding and security best practices. Required Qualifications 12 years in cybersecurity application security or architecture roles Proven experience as a Solution Architect or AppSec Lead in large enterprises (preferably BFSI) Strong expertise in: Secure SDLC / DevSecOps Zero Trust Architecture Cloud platforms (Azure AWS GCP) Hands-on experience with AppSec tools and CI/CD integrations. Deep understanding of: OWASP Top 10 API Security Top 10 Threat modeling methodologies Experience with regulatory compliance frameworks (OSFI PCI-DSS ISO NIST) Preferred Certifications: CISSP / CISM / CCSP CSSLP (Certified Secure Software Lifecycle Professional) TOGAF (Architecture) SABSA or equivalent security architecture certifications
Required Education:
Bachelors Degree
Solution Architect – Application Security (AppSec), Zero Trust & Compliance • Toronto, Ontario, Canada
Collabera is seeking a hands‑on Solution Architect with a strong focus on application architecture to support a critical migration initiative.This role will primarily focus on designing and operati... Voir plus
This role is primarily responsible for the architecture, design, and security of cloud environments and SaaS applications for Celestica.It reports into the Corporate IT Security leadership and will... Voir plus
Expert Solution Architect - Infrastructure.About the job Expert Solution Architect - Infrastructure.Job Location in Montreal, QC; Toronto, ON.The role of Expert Solution Architect Infrastructure is... Voir plus
Capco is a distinctly and positively different place to work.Much more than consultants, we are active participants in the global financial services industry.Our passionate business and technology ... Voir plus
At Aviso, we are dedicated to improving the financial well‑wellbeing of Canadians.As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibilit... Voir plus
Designs secure and scalable technology solutions for a gaming company, translating business needs into designs while ensuring compliance. Voir plus
Designs, develops, and maintains applications, translating business needs into technical solutions.Leads development teams, influences data standards, and ensures architectural integrity for risk m... Voir plus
Step into a senior role as an AWS Security Architect at our Richmond Hill office, focusing on hybrid work and advanced security solutions for cloud infrastructures.This position is ideal for a seas... Voir plus
Client for this project is a large globalprofessional services firm.Identify key business stakeholders and establish communication with;.Identify business goals and objectives;.Gather primary funct... Voir plus
A leading security solutions company in Toronto is seeking a Senior Technology Architect.The role involves designing and implementing enterprise security solutions, managing complex architectures, ... Voir plus
A technology firm in Toronto is seeking an experienced IT Analyst to lead technology strategy initiatives.The ideal candidate has over 12 years of software engineering experience and a strong backg... Voir plus
At Manulife, we are changing the way we unlock value and secure the enterprise through technology and we want you to be part of it! We are growing our cybersecurity program with the vision to deliv... Voir plus
The anticipated annual base salary for this position is $105,700 - $142,900.The offered salary will be based on the candidate’s experience, knowledge, skills and qualifications.TCI) currently has a... Voir plus
A member-owned credit union is seeking a Senior Security Architect to design and implement secure technology solutions.This role includes mentoring junior architects, leading security assessments, ... Voir plus
We have partnered with a company who is seeking an experience Anaplan Solutions Architect who can drive the design of their Anaplan system across Financial Planning & Analysis (FP&A), Capital Plann... Voir plus
Fortune 100/500/1000 and other companies in Canada/US.IT infrastructure management consulting client.These 3 resources will be part of a large team that works with end core client groups from the e... Voir plus
A leading financial services organization in Ontario is seeking a Senior Identity Analyst to ensure adherence to identity and security standards across the organization.This role involves reviewing... Voir plus
The Senior Solution Architect is responsible for the oversight and evolution of key technology and applications including technical planning and strategy with a focus on emerging technology to sati... Voir plus
A leading consulting firm in Toronto is seeking a Senior Solution Architect to lead the implementation of the Enterprise Asset Management (EAM) Program, focused on IBM Maximo.The role involves over... Voir plus
Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to c... Voir plus
