Snr Security Design Specialist to implement security by design, security mitigations and perform

Our valued client is looking for a Snr Security Design Specialist to implement security by design, security mitigations and perform verification and testing of security measures

% remote, initial 5 month contract with possibility of extension

Responsibilities:

• Working within project teams to implement security by design, security mitigations and perform verification and testing of security measures following the clients Cyber Security processes and deliverables.
• Develop IT security reference architectures, design patterns, and requirements to integrate security into departmental systems and projects.
• Technologies include but are not limited to Azure Cloud (IaaS, PaaS and SaaS), AI/LLMs (both self-hosted and as-a-service) as well as on-premises solutions.
• Standards and guidance are from the Canadian Center for Cyber Security and the Treasury Board Secretariat of Canada, including but not limited to:
• Directive on Service and Digital
• Directive on Security Management, Appendix B
• ITSG-33 and ITSP.10. Series
• Government of Canada Cloud Gardrails
• Government of Canada Guide on the use of generative artificial intelligence
• New or revised policy, standards, guideline, processes and/or procedures documents.
• Documents in support of Security Assessment and Authorization
• Needs and options analysis, Current state assessments, Future state designs, Configuration and build guides
• Threat Risk Assessments
• System architecture documents
• Briefing notes
• In support of the projects to attend key meetings and collaborate with fellow IT staff and clients

Must Have Skills:

• 10+ years of experience, within the last 15 years, planning, developing and implementing IT security architecture or IT security designs for complex enterprise-wide applications or information systems.
• Security and Risk Management, Cloud Security, Endpoint Security, Communications and Network Security, Identify and Access Management, Security Operations, Software Development and Applications Security
• 2+ years of experience, within the last 5 years reviewing, analyzing, and/or applying
• A broad range of security technologies, including multiple types of systems and applications architectures, and multiple hardware and software platforms
• The significance and implications of market and technology trends within architecture roadmaps and solution designs. (examples: web services security, incident management, identity management)
• Best practices and standards related to the concept of network zoning and defence in-depth principles.