Enterprise Cybersecurity Architect – Zero Trust

Our public sector client is seeking a Enterprise Cybersecurity Architect – Zero Trust to lead enterprise-wide Zero Trust implementation

Join a program delivering an enterprise-wide rollout of Zero Trust capabilities with a strong emphasis on technology governance and control definition. The scope includes defining and documenting Zero Trust security control sets, developing Zero Trust design standards based on patterns, establishing technical governance processes, and ensuring consistent policy enforcement across identity, data, application, network, asset, and device domains. This is a 12-month contract with the possibility of extension and remote work in Canada, with responsibilities that include providing updates to executive stakeholders and supporting the planning, evaluation, and implementation of security tools and technologies.

Contract, Vancouver, Remote, Working Hours: PST

Must Haves

• Deep understanding of Zero Trust principles (NIST SP 800-207) across identity, data, application, network, asset, and device layers
• 5–7 years in enterprise security architecture; minimum 2 years as a security architect
• Implementation of Zero Trust projects in a large, complex organization in the role of enterprise security architect
• Definition of security control sets aligned to NIST, ISO 27001, and CIS Controls
• A degree in engineering, computer science, information security, or equivalent

Nice to Have

• SABSA or TOGAF certification
• CISSP, SANS GIAC, AWS/GCP certifications
• Working experience implementing security technologies in IAM, Network Security, Cloud Security, and Endpoint & Data protection

Responsibilities

• Support the enterprise-wide implementation of Zero Trust
• Provide security architectural leadership
• Develop cyber security policy and standard frameworks based on Zero Trust
• Define and document Zero Trust-based security control sets
• Develop Zero Trust design standards
• Establish technical governance capabilities and processes
• Ensure consistent policy enforcement across identity, data, application, network, asset, and device domains
• Provide regular updates to executive sponsors, directors, and other stakeholders
• Support the planning, evaluation, and implementation of security tools and technologies