Cybersecurity Architect

About the role

Manulife is hiring a Cybersecurity Architect for its US business segment, based in Toronto. The Architect supports projects that apply new and existing technologies and solutions to solve business needs in cybersecurity, working with architects, engineers, technical SMEs and operational support staff to deliver solutions that meet business and technical requirements. The role contributes to technology roadmaps and acts as a subject matter expert in areas such as Identity and Access Management (IAM), SIEM integration and incident-response automation.

Key responsibilities

• Contribute to cybersecurity strategies, architecture standards and technology roadmaps aligned with Zero Trust principles.
• Design and guide security architectures for IAM, SIEM and security operations, cloud security, application security and incident-response automation.
• Develop enterprise solutions with appropriate security controls and risk-mitigation strategies across modern and legacy environments.
• Lead conceptual, solution and component-level architectures, build reusable reference architectures and implementation patterns, and review architectures against security standards.
• Evaluate third-party technologies and platforms, assess vulnerabilities, alerts and threat intelligence, and support security investigations and incident response.
• Partner with architects, engineers, security teams, technology operations and business stakeholders, and communicate security requirements, risks and trade-offs clearly.
• Provide hands-on technical guidance and support architecture validation, including after-hours response to significant incidents when required.

Required profile

• 7+ years of professional experience in cybersecurity, security engineering or security architecture, or equivalent demonstrated expertise.
• Experience designing or supporting enterprise security solutions in IAM, SIEM/security operations, cloud security, application security or infrastructure security.
• Experience with threat modeling, security controls, risk mitigation and secure testing.
• Strong written and verbal communication skills, able to explain complex security topics to technical and non-technical audiences.
• Bachelor's degree in a relevant field or equivalent practical experience; a master's degree is an asset.

Required skills

• Core application and platform security concepts, including authentication, authorization, transport security, secure configuration, data validation and security logging.
• Cloud-native architecture and cloud security with Microsoft Azure, AWS, GCP or comparable platforms.
• Knowledge of Windows, macOS and Linux, network protocols and security frameworks such as NIST.
• Scripting, OS tooling, troubleshooting and security configuration.
• Preferred: incident-response tooling, secrets management, DevSecOps, and CISSP certification.

What we offer

• Expected salary range of CAD 113,000 to 163,000, with incentive programs available.
• Flexible work arrangement described as hybrid.
• A supportive, inclusive environment with opportunities to learn and grow.