Solution Architect – Security, API & Cloud (AWS)

Job Description: Solution Architect - (Security & API Infrastructure) Solution Architect with deep expertise in security API management and cloud infrastructure

Toronto ON - Hybrid (4 Days WFO)

12 months

Architecture & Design

Lead end-to-end solution design across security API and cloud domains from requirements gathering and architecture definition through implementation and operational handover Define and enforce architecture patterns standards and reference architectures aligned with enterprise architecture best practices (TOGAF Zachman or equivalent frameworks) Produce high-quality solution design documents including HLDs LLDs data flow diagrams sequence diagrams and threat models Evaluate and recommend technology solutions conducting proof-of-concept assessments and vendor evaluations Security Architecture Design and implement enterprise security architectures encompassing encryption (at rest in transit and in use) key management certificate lifecycle management and PKI Architect fraud detection and identity verification solutions leveraging ThreatMetrix and similar platforms Define security policies for API gateways WAFs DDoS mitigation and bot management Conduct security reviews threat modelling and risk assessments for new and existing solutions Ensure compliance with financial industry regulations (PCI-DSS SOX GDPR Open Banking standards) API & Edge Infrastructure Design and govern API strategies using Apigee (API proxy design developer portals rate limiting OAuth/OIDC API monetisation) Architect edge security and CDN solutions using Akamai and Cloudflare (WAF rules bot management DDoS protection edge compute DNS management) Design and manage DNS architecture including DNSSEC traffic management failover and multi-CDN strategies Cloud & Infrastructure Architect solutions on AWS (VPC IAM KMS CloudFront Route 53 GuardDuty Security Hub WAF Shield Lambda ECS/EKS API Gateway) Apply cloud-native security principles: zero-trust networking least-privilege IAM secrets management and infrastructure-as-code security scanning Design hybrid and multi-cloud connectivity patterns where required Governance & Leadership Contribute to and uphold architecture governance processes including architecture review boards (ARBs) design authority forums and exception management Mentor and guide development teams on security best practices and architectural standards Collaborate with enterprise architects engineering leads product owners and third-party vendors to align solutions with business strategy Maintain architecture decisions and contribute to the enterprise architecture repository Required Experience & Qualifications Core Technical Expertise 8 years in solution/technical architecture roles with at least 5 years focused on security architecture Proven hands-on experience with Apigee API management platform (proxy development shared flows target servers analytics) Strong working knowledge of Akamai (Property Manager WAF/KSD Bot Manager Edge DNS) and/or Cloudflare (WAF Workers DNS) Deep understanding of encryption standards and protocols (TLS 1.2/1.3 AES-256 RSA elliptic curve HSMs tokenisation) Experience with DNS architecture at enterprise scale (DNSSEC GSLB authoritative vs recursive TTL strategies) Practical experience with ThreatMetrix or equivalent digital identity/fraud prevention platforms Strong AWS architecture skills (AWS Solutions Architect Professional certification preferred) Domain & Governance Experience Financial services industry experience is essential banking payments insurance or capital markets Demonstrated experience in enterprise architecture governance: defining standards chairing or participating in ARBs managing technical debt and driving architectural compliance Familiarity with regulatory and compliance frameworks relevant to financial services (PCI-DSS SOX FCA PSD2 Open Banking) Architecture Practices Experience across the full solution lifecycle: discovery design build test deploy operate Proficiency with architecture frameworks (TOGAF C4 model arc42) and modelling tools (e.g. LucidChart ) Strong understanding of DevSecOps CI/CD pipelines and infrastructure-as-code (Terraform CloudFormation) Experience with microservices event-driven architecture and integration patterns (REST GraphQL messaging/streaming) Desirable Skills Additional cloud platform experience (Azure GCP) Knowledge of identity platforms (Okta Ping) Experience with SIEM/SOAR platforms (Splunk Sentinel) Container security Soft Skills Excellent stakeholder communication ability to translate complex technical concepts for executive and non-technical audiences Strong analytical and problem-solving capabilities Comfortable operating in fast-paced regulated environments with competing priorities Collaborative leadership style with experience influencing without direct authority