Assignment: RQ08433 Technology Architect Senior
Job Title: Technology Architect
Requisition (SS): RQ08433
Start Date:
End Date:
Client: I&IT Strategy and Cyber Security
Office Location: 222 Jarvis St. Toronto
Organization: I&IT Strategy and Cyber Security
Extension # of Days: 246.00
Ministry: Ministry of Public and Business Service Delivery (former MGCS)
# Business Days: 494.00
Note: Hybrid 3 days onsite / 2 days remote
Must Haves:
- Experience with Security Automation and orchestration.
- 5 years of experience in within Security Automation and orchestration.
Description
Key Responsibilities:
- Architecture Design: Develop and maintain secure architectures for applications and infrastructure focusing on automation and scalability.
- Security Integration: Integrate security practices into the DevOps pipeline ensuring continuous security checks and compliance.
- Policy Development: Create and enforce security policies standards and procedures tailored to DevSecOps environments.
- Collaboration: Work closely with development operations and security teams to ensure security is a shared responsibility
- Advisory Role: Act as an internal consultant providing expert advice on security matters to various teams and stakeholders
Experience and Skill Set Requirements
Experience
- Programming Languages: Proficiency in languages such as Python SPLUNK SPL and Kusto Query Language (KQL).
- Security Frameworks: Knowledge of security frameworks and standards like NIST ISO 27001 and OWASP.
- Cryptography: Understanding of cryptographic principles and practices to ensure data integrity and confidentiality.
- Network Security: Familiarity with network protocols firewalls IDS/IPS and VPNs.
- Cloud Security: Experience with securing cloud environments (AWS Azure GCP) and understanding of cloud security best practices.
- Secure Coding Practices: Ability to write secure code to prevent vulnerabilities such as SQL injection and XSS.
- DevSecOps: Knowledge of integrating security practices into the DevOps pipeline to ensure continuous security throughout the development lifecycle
- Threat Modeling: Skills in identifying and mitigating potential security threats during the design phase.
Strong Technical Knowledge of enterprise security platforms:
- Palo Alto Cortex XDR
- Microsoft Defender for Endpoint
- Microsoft Sentinel
- SPLUNK Cloud / Enterprise Security
- SPLUNK SOAR
- Service NOW Security Incident Response (SIR)
- Service NOW Vulnerability Response (VR)