Solution Architect -Security & API Infrastructure
About the role
Job Title Solution Architect (Security & API Infrastructure) Location Toronto, Ontario (Hybrid – 4 Days Work From Office) Duration 6–12 Months Required Experience 8+ Years (5+ Years in Security Architecture) Primary Skills Solution Architecture Security Architecture API Infrastructure Apigee API Management AWS Cloud Architecture Akamai Cloudflare Enterprise Security Financial Services Role Description
- Architecture & Solution Design Lead end-to-end solution architecture across security, API, and cloud domains. Gather requirements and define solution architecture from design through implementation and operational handover. Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.). Produce architecture artifacts including: High-Level Design (HLD) Low-Level Design (LLD) Data Flow Diagrams Sequence Diagrams Threat Models Evaluate emerging technologies through Proof of Concepts (POCs) and vendor assessments.
- Security Architecture Design enterprise security architectures covering: Encryption at Rest Encryption in Transit Encryption in Use Key Management Certificate Lifecycle Management Public Key Infrastructure (PKI) Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms. Define security policies for: API Gateways Web Application Firewalls (WAF) DDoS Protection Bot Management Conduct: Threat Modeling Security Reviews Risk Assessments Ensure compliance with financial industry standards including: PCI-DSS SOX GDPR Open Banking
- API & Edge Infrastructure Design enterprise API strategies using Apigee including: API Proxy Design Shared Flows Target Servers Developer Portals Analytics OAuth/OIDC Rate Limiting API Monetization Architect edge security solutions using: Akamai Cloudflare Configure: WAF Rules Bot Manager DDoS Protection Edge Compute DNS Management Design enterprise DNS architecture including: DNSSEC Traffic Management Failover Multi-CDN Strategies GSLB TTL Strategies
- Cloud & Infrastructure Design secure AWS cloud solutions utilizing: VPC IAM KMS CloudFront Route 53 GuardDuty Security Hub AWS WAF AWS Shield Lambda ECS/EKS API Gateway Implement cloud-native security principles: Zero Trust Networking Least Privilege IAM Secrets Management Infrastructure-as-Code Security Design hybrid and multi-cloud connectivity architectures.
- Governance & Leadership Participate in Architecture Review Boards (ARBs) and Design Authority forums. Define enterprise architecture standards and governance. Mentor development teams on architecture and security best practices. Collaborate with: Enterprise Architects Engineering Teams Product Owners Third-party Vendors Maintain architecture documentation and enterprise architecture repositories. Required Experience Core Technical Expertise 8+ years in Solution or Technical Architecture. 5+ years focused on Security Architecture. Hands-on experience with: Apigee API Management API Proxy Development Shared Flows Target Servers Analytics Strong expertise with: Akamai (Property Manager, WAF/KSD, Bot Manager, Edge DNS) Cloudflare (WAF, Workers, DNS) Deep understanding of: TLS 1.2 / TLS 1.3 AES-256 RSA Elliptic Curve Cryptography HSM Tokenization Enterprise DNS architecture experience. Practical experience with ThreatMetrix or similar fraud prevention platforms. Strong AWS architecture experience (AWS Solutions Architect Professional preferred). Domain & Governance Experience Financial Services experience is mandatory: Banking Payments Insurance Capital Markets Experience with: Architecture Governance Technical Debt Management Architecture Review Boards (ARBs) Enterprise Standards Knowledge of compliance frameworks: PCI-DSS SOX FCA PSD2 Open Banking Architecture Practices Experience across the complete solution lifecycle: Discovery Design Build Test Deploy Operate Familiarity with architecture frameworks: TOGAF C4 Model arc42 Experience using: Lucidchart Draw.io Strong understanding of: DevSecOps CI/CD Pipelines Terraform AWS CloudFormation Experience with: Microservices Event-Driven Architecture REST APIs GraphQL Messaging & Streaming Desirable Skills Microsoft Azure Google Cloud Platform (GCP) Okta Ping Identity Splunk Microsoft Sentinel SIEM/SOAR Platforms Container Security Soft Skills Excellent stakeholder communication. Ability to present complex technical concepts to executive and non-technical audiences. Strong analytical and problem-solving skills. Ability to work in fast-paced, highly regulated environments. Collaborative leadership with experience influencing cross-functional teams. Preferred ATS Keywords Solution Architect Security Architect Enterprise Architecture API Infrastructure Apigee API Gateway OAuth OpenID Connect (OIDC) AWS Cloud Architecture Akamai Cloudflare WAF DDoS Protection Bot Management ThreatMetrix PKI TLS 1.3 AES-256 RSA HSM Tokenization DNS DNSSEC Route 53 CloudFront IAM KMS GuardDuty Security Hub Zero Trust DevSecOps Terraform CloudFormation TOGAF C4 Model REST APIs GraphQL Microservices Event-Driven Architecture Financial Services Banking PCI-DSS SOX PSD2 Open Banking Architecture Review Board (ARB) Solution Design High-Level Design (HLD) Low-Level Design (LLD) Threat Modeling Security Architecture
About Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Astra - North Infoteck Inc.
Agile - Systems - Technologies - Resources - Applications
Apply for Jobs@ https://careers.astra-north.com/jobs/
We are a global information technology services, management consulting and outsourcing company headquartered in Canada. Astra North helps clients navigate the ever-changing complex information technology landscape with its portfolio of IT consulting services, managed services and staffing and talent management solutions.
The core challenge facing many businesses in their IT functions is the increasing shortage of talent across the globe and its resultant impact on productivity. To overcome this challenge Astra-North provides its clients with a single source Integrated Recruitment Process Outsourcing - iRPO Service. Astra-North works as a specialist strategic partner for its clients by providing the best talent pool of IT Professionals on contract hire, permanent hire or managed services basis through its comprehensive and integrated recruitment, staff augmentation, workforce solutions, recruitment process outsourcing and managed services programs which are customized for individual client needs. Astra North Staffing Services include managing programs that are in compliance with matters focussing on careers, communications, legal and regulatory issues, technology and outsourcing, budgeting and metrics, IT staffing management best practices and global staffing management issues.
Our technical service extends the entire software development lifecycle from Consulting, Business Process Analysis, Requirement Mapping, Analysis, Design, Development, Testing to Implementation and Support. Astra-North Infoteck has expertise in building, maintaining and reengineering IT solutions to meet its client’s evolving needs.We help clients become agile to meet and exceed their goals.
Astra-North ~ Conquering Today's Challenges, Achieving Tomorrow's Vision!
Similar Jobs
Solution Architect -Security & API Infrastructure
About the role
Job Title Solution Architect (Security & API Infrastructure) Location Toronto, Ontario (Hybrid – 4 Days Work From Office) Duration 6–12 Months Required Experience 8+ Years (5+ Years in Security Architecture) Primary Skills Solution Architecture Security Architecture API Infrastructure Apigee API Management AWS Cloud Architecture Akamai Cloudflare Enterprise Security Financial Services Role Description
- Architecture & Solution Design Lead end-to-end solution architecture across security, API, and cloud domains. Gather requirements and define solution architecture from design through implementation and operational handover. Establish architecture patterns, standards, and reference architectures aligned with enterprise frameworks (TOGAF, Zachman, etc.). Produce architecture artifacts including: High-Level Design (HLD) Low-Level Design (LLD) Data Flow Diagrams Sequence Diagrams Threat Models Evaluate emerging technologies through Proof of Concepts (POCs) and vendor assessments.
- Security Architecture Design enterprise security architectures covering: Encryption at Rest Encryption in Transit Encryption in Use Key Management Certificate Lifecycle Management Public Key Infrastructure (PKI) Architect fraud detection and digital identity verification solutions using ThreatMetrix or equivalent platforms. Define security policies for: API Gateways Web Application Firewalls (WAF) DDoS Protection Bot Management Conduct: Threat Modeling Security Reviews Risk Assessments Ensure compliance with financial industry standards including: PCI-DSS SOX GDPR Open Banking
- API & Edge Infrastructure Design enterprise API strategies using Apigee including: API Proxy Design Shared Flows Target Servers Developer Portals Analytics OAuth/OIDC Rate Limiting API Monetization Architect edge security solutions using: Akamai Cloudflare Configure: WAF Rules Bot Manager DDoS Protection Edge Compute DNS Management Design enterprise DNS architecture including: DNSSEC Traffic Management Failover Multi-CDN Strategies GSLB TTL Strategies
- Cloud & Infrastructure Design secure AWS cloud solutions utilizing: VPC IAM KMS CloudFront Route 53 GuardDuty Security Hub AWS WAF AWS Shield Lambda ECS/EKS API Gateway Implement cloud-native security principles: Zero Trust Networking Least Privilege IAM Secrets Management Infrastructure-as-Code Security Design hybrid and multi-cloud connectivity architectures.
- Governance & Leadership Participate in Architecture Review Boards (ARBs) and Design Authority forums. Define enterprise architecture standards and governance. Mentor development teams on architecture and security best practices. Collaborate with: Enterprise Architects Engineering Teams Product Owners Third-party Vendors Maintain architecture documentation and enterprise architecture repositories. Required Experience Core Technical Expertise 8+ years in Solution or Technical Architecture. 5+ years focused on Security Architecture. Hands-on experience with: Apigee API Management API Proxy Development Shared Flows Target Servers Analytics Strong expertise with: Akamai (Property Manager, WAF/KSD, Bot Manager, Edge DNS) Cloudflare (WAF, Workers, DNS) Deep understanding of: TLS 1.2 / TLS 1.3 AES-256 RSA Elliptic Curve Cryptography HSM Tokenization Enterprise DNS architecture experience. Practical experience with ThreatMetrix or similar fraud prevention platforms. Strong AWS architecture experience (AWS Solutions Architect Professional preferred). Domain & Governance Experience Financial Services experience is mandatory: Banking Payments Insurance Capital Markets Experience with: Architecture Governance Technical Debt Management Architecture Review Boards (ARBs) Enterprise Standards Knowledge of compliance frameworks: PCI-DSS SOX FCA PSD2 Open Banking Architecture Practices Experience across the complete solution lifecycle: Discovery Design Build Test Deploy Operate Familiarity with architecture frameworks: TOGAF C4 Model arc42 Experience using: Lucidchart Draw.io Strong understanding of: DevSecOps CI/CD Pipelines Terraform AWS CloudFormation Experience with: Microservices Event-Driven Architecture REST APIs GraphQL Messaging & Streaming Desirable Skills Microsoft Azure Google Cloud Platform (GCP) Okta Ping Identity Splunk Microsoft Sentinel SIEM/SOAR Platforms Container Security Soft Skills Excellent stakeholder communication. Ability to present complex technical concepts to executive and non-technical audiences. Strong analytical and problem-solving skills. Ability to work in fast-paced, highly regulated environments. Collaborative leadership with experience influencing cross-functional teams. Preferred ATS Keywords Solution Architect Security Architect Enterprise Architecture API Infrastructure Apigee API Gateway OAuth OpenID Connect (OIDC) AWS Cloud Architecture Akamai Cloudflare WAF DDoS Protection Bot Management ThreatMetrix PKI TLS 1.3 AES-256 RSA HSM Tokenization DNS DNSSEC Route 53 CloudFront IAM KMS GuardDuty Security Hub Zero Trust DevSecOps Terraform CloudFormation TOGAF C4 Model REST APIs GraphQL Microservices Event-Driven Architecture Financial Services Banking PCI-DSS SOX PSD2 Open Banking Architecture Review Board (ARB) Solution Design High-Level Design (HLD) Low-Level Design (LLD) Threat Modeling Security Architecture
About Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Astra - North Infoteck Inc.
Agile - Systems - Technologies - Resources - Applications
Apply for Jobs@ https://careers.astra-north.com/jobs/
We are a global information technology services, management consulting and outsourcing company headquartered in Canada. Astra North helps clients navigate the ever-changing complex information technology landscape with its portfolio of IT consulting services, managed services and staffing and talent management solutions.
The core challenge facing many businesses in their IT functions is the increasing shortage of talent across the globe and its resultant impact on productivity. To overcome this challenge Astra-North provides its clients with a single source Integrated Recruitment Process Outsourcing - iRPO Service. Astra-North works as a specialist strategic partner for its clients by providing the best talent pool of IT Professionals on contract hire, permanent hire or managed services basis through its comprehensive and integrated recruitment, staff augmentation, workforce solutions, recruitment process outsourcing and managed services programs which are customized for individual client needs. Astra North Staffing Services include managing programs that are in compliance with matters focussing on careers, communications, legal and regulatory issues, technology and outsourcing, budgeting and metrics, IT staffing management best practices and global staffing management issues.
Our technical service extends the entire software development lifecycle from Consulting, Business Process Analysis, Requirement Mapping, Analysis, Design, Development, Testing to Implementation and Support. Astra-North Infoteck has expertise in building, maintaining and reengineering IT solutions to meet its client’s evolving needs.We help clients become agile to meet and exceed their goals.
Astra-North ~ Conquering Today's Challenges, Achieving Tomorrow's Vision!