Advisor, Cloud Security Architect

Questrade Financial Group (QFG) of Companies is committed to helping our customers become much more financially successful and secure.

We are everything a traditional financial institution is not. At QFG, you will be constantly moving forward, bringing the future of fintech into existence. You will be a part of a collaborative team that cares deeply about our mission and each other. Your team members will help you conquer challenges, push boundaries and discover what you are truly capable of.

This is a place where you can explore, discover and learn with continuous growth. As a diverse and inclusive place to work, there are flexible working arrangements so you can unleash your creativity and curiosity with no limits. If you share the same sense of infinite possibility, come shape your future at Questrade.

What’s it like working as an Advisor, Cloud Security Architect at Questrade?

The Advisor, Security Architecture is a seasoned technology leader, self-driving and experienced in delivering significant business value through the collaborative development of corporate wide secure enterprise architecture, application and cloud architectures.

The security architecture function will align and collaborate with the enterprise architecture, infrastructure and security teams to provide specialized cybersecurity advisory and consultations for the development of enterprise architecture and applications. It will ensure the documentation of the security view that will inform risk assessment, operationalization and verification functions within the CISO function. It will support engineering velocity in alignment with business priorities, enterprise risk appetite, information security policy and standards,security strategy and architecture.

The Advisor, Security Architecture will collaborate closely with Application Security Engineering, Cloud / Platform Engineering, Infrastructure and Cyber Security teams, leading cross team initiatives and bringing balance and enterprise strategic vision to establish secure cloud and application solutions.

Need more details? Keep reading...

• Support cloud solutions design from a security standpoint and develop or review detailed architecture models addressing current and target states.
• Define and drive the Secure-by-Design and Shift-Left methodologies through design, advisory and collaboration, to ensure that security is embedded within all enterprise architecture, cloud architecture and application development initiatives.
• Develop and maintain security architecture views and artifacts of cloud and application solutions, in order to inform risk assessment, provisioning (e.g, firewall ACLs) and testing activities (e.g., penetration testing).
• Work closely and collaboratively with several teams including, but not limited to, cybersecurity, cloud engineering, application security engineering, networking and domain engineering teams.
• Support technical teams to architect, build, and securely deploy cloud solutions across hybrid, multi-cloud and integrated environments.
• Support the implementation, automation, and configuration of DevSecOps capabilities and enhancements.
• Assess cloud migration initiatives helping to establish the target architecture addressing risks, opportunities, and the planning from the transition to the final state.
• Participate and enhance the Secure Software Development Lifecycle (SSDLC) process in collaboration with Software Engineers.
• Participate and enhance threat risk modeling in collaboration with Software Engineers.
• Provide expertise on cloud infrastructure and security architecture to other IT and business teams.
• Develop standards and best practice guidance to cultivate a culture of security awareness with continuing education of personnel to ensure security standards are adhered to at all times.
• Assist with the technical screening of new team members joining security / engineering / architecture teams.
• Assist in defining target architectures across the organization’s technology landscape. Propose viable transitional architectures, frameworks and methodologies to help engineering teams reach the target architecture within reasonable iterative releases.
• Assist in preparing architectural roadmaps from a cyber security standpoint.
  
  

So are YOU our next Advisor, Cloud Security Architect ? You are if you have…

• 10+ years of experience working as an Architect particularly with cloud technologies, 8+ years of software development experience.
• Deep understanding of cloud and security concepts and solutions including public, private, hybrid and multi-cloud.
• Proven experience architecting solutions for the cloud, bonus points for Google Cloud experience.
• Knowledge of defense in depth concepts and the expertise to implement these concepts in a cloud-native and hybrid environments, e.g. applying authorization policies at gateways, sidecars and application layers, creating trusted sub zones in a cloud environment, creating automated security tests to validate authorization policies.
• Experience with cloud networking design and concepts, e.g. VPC, VNETs and subnets, routing, NAT, firewalls, WAF, CDN, etc.
• Demonstrated interest in new technologies and new architectural patterns, such as occasionally joining appropriate meetups / workshops, reading quality articles, etc.
• Strong understanding of multiple tech stacks, especially the following: C#, Node.js, Java, C/C++ and Python.
• Secure application development experience with web applications, microservices, mobile applications, CI/CD pipelines, IaC, GKE, SAST/DAST, IaaS and PaaS.
• Strong knowledge of cybersecurity methodologies and best practices such as OWASP, S-SDLC, Agile
• Previous experience working in financial services and familiarity with regulatory frameworks such as OSFI, IIROC, PIPEDA, GDPR and NYDFS is preferred
• Exposure to the full software development life cycle and agile methodology, including design, configuration, integration, testing and support, along with gathering requirements, designing the future state solution, the development work breakdown, quality assurance support and post-production efforts.
  
  

Additional Kudos if you have.…

• CISSP (Certified Information Systems Security Professional) or similar certification is a bonus.
• Public Cloud certifications are a bonus.
  
  

Sounds like you? Click below to apply!

At Questrade Financial Group of Companies, with multiple office locations around the world, we are committed to fostering a diverse, inclusive and accessible work environment. This is an environment where individuals are treated with dignity and respect. Here, the unique skills and experience you bring will be valued. You will be supported and motivated, so that you can harness your unlimited potential. Our team reflects the diversity of the communities we serve and operate in. Having a collaborative and diverse team helps us push boundaries to bring the future of fintech into existence—not only for the benefit of our customers, but for those who build their career with us.

Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment/selection process, please let us know and we will work with you to meet your needs.

Apply Now