Security Solution Architect

Position Title: Solution Architect
Location: Scarborough, ON
Duration: 6 months
             
Story Behind the Need
Business group: Cryptography – team is a product group within Cloud and Applications Security. This team focuses mainly on strategy building.
Project: Application Security SME contractor needed to help design the new software composition analysis (SCA) platform and migration strategy from Black Duck. Will be supporting AppSec Product (OSS).
Reason for request: Project requirement
Candidate Value Proposition
The successful candidate will have the opportunity to lead one of the major cloud transformations in the industry, high visibility program.
Typical Day in Role:
Network security is cloud is one of the crucial security domains, with a highly specialized experience required, and forms a fundamental building block in the entire cloud architecture.
SCA Design for selected vendor including the below tasks:

• SCA SaaS Tenant set up
• SCA SaaS Integration with Bank incl. SSO, ESLM, CI/CD
• Migration Design from Black Duck to a new SCA vendor

Collaborate with cloud infrastructure, DevOps and development teams to integrate security during the design and development phases.

• Provide mentorship and training to other team members on cloud security principles.
• Help develop test cases and drive Proof of Value (POV) to completion.
• Help develop a procedure.
• Contribute to SCA project onboarding process development.
• Contribute to system architecture.

Must Have Skills:

• 10+ years’ experience in IT Security in architecture or integration roles.
• 4+ years’ experience in software security controls architecting and solutioning
• Strong recent project experience with large migrations.
• 2-3+ years’ recent project experience with integration, specifically with various cloud and on-prem solutions.
• Recent experience with and understanding of SBoM, OSS libraries, and licenses.

Nice-To-Have Skills:

• Experience with deployment and managing IaaS, PaaS & SaaS solutions
• Experience in the financial industry
• Knowledge of /exposure to CI/CD tools like Jenkins, Azure DevOps, GitLab CI/CD, CircleCI, BitBucket/GitHub, Jfrog Artifactory, Ansible, Confluence, Jira, Bamboo etc.

Soft Skills Required:

• Strong analytical and problem-solving skills, with an ability to think strategically and tactically about complex cloud security issues.
• Communication: excellent written and verbal communication and interpersonal skills
• Fast learner with strong analytical skills and improvement mindset
• Must be able to operate independently within tight time frames
• High energy, demonstrated ability to work under pressure, deals well with ambiguities and uncertainties, and drives results.

Best vs Average: We are seeking a contractor to drive the team in developing the test cases and POV. Experience developing high level architecture, deployment, and integrations is critical to this role. There is a dedicated support team, however the selected resource should seek necessary approvals and provide guidance for deployment.
Degrees or certifications:

• Bachelor’s degree in a related field required, professional experience is a priority
• CISSP or similar certifications are an asset

Candidate Review & Selection:
Structure and Format:
Virtual and in person interviews. IN person will be at 44 King West on Tuesdays or Thursdays (HM can accommodate as needed but please note these days)
Two Rounds of interview:
1st round via MS teams, panel technical and behavioral interview
2nd round – 1 hour – with HM in person – technical interview with scenario-based questions, if in person will be solutioning live on paper/whiteboard