Technology - Senior Architect/Architect, Cybersecurity at United States of Aritzia — NeverHard

THE BUSINESS We are Everyday Luxury™. It's what we do and how we do it - together. It's working alongside world-class talent in pursuit of world-class results. It's maximizing your potential in a high-performance culture. It's knowing that wherever you are, you belong. It's elevating your world - and the world of those who love and will love Aritzia. It's You. And an endless runway of opportunity. With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America - including Toronto, New York, Los Angeles and Seattle - our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best - with us. THE TEAM The mission of the Cybersecurity Department is to deliver high‐quality cybersecurity services and solutions that minimize risk across Aritzia's systems and data. THE OPPORTUNITY Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing, engineering, and enabling secure technology solutions that protect Aritzia's systems and data, reduce cybersecurity risk, and enable the business to operate and innovate securely. As the Senior Architect/Architect, Cybersecurity, you will define secure architectures, reusable security patterns, and reference architectures across Aritzia's retail, eCommerce, enterprise, cloud, SaaS, and integration environments. You will partner with business and technology teams to evaluate risk, establish proportionate security requirements, and guide solutions from early design through implementation and assurance. With your valuable contribution to the business in this role, the opportunities are endless, from a rewarding career in Cybersecurity to continued growth and development with Aritzia. THE ROLE Create practical, reusable security patterns and reference architectures for identity, applications, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access. Lead security architecture reviews for proposed and changing solutions, identify trust boundaries and threats, and define clear, proportionate, implementable security requirements and acceptance criteria. Design secure architectures for retail and e-commerce capabilities, including customer identity, mobile and web applications, checkout, payment integrations, point-of-sale environments, commerce platforms, and third-party services. Perform threat modeling to evaluate abuse scenarios, credential theft, authorization failures, data exposure, integration compromise, and attack paths across connected systems. Define identity architecture for human and workload identities, federation, service accounts, privileged access, least privilege, secrets, and credential lifecycle management. Guide consistent hybrid cloud security architecture across Microsoft Azure, Google Cloud Platform, on-premises platforms, SaaS services, and supporting integrations. Architect secure AI adoption by defining trust boundaries and control patterns for agents, MCP servers, retrieval systems, external inference services, tool execution, sensitive data access, human approval, and auditability. Define architecture‑specific detection and response requirements, including required telemetry, logging, retention, correlation, alerting, and response capabilities. Translate PCI DSS and other applicable compliance requirements into architecture decisions, control requirements, and evidence expectations. Document architecture decisions and exceptions, including trade‑offs, residual risks, compensating controls, accountable owners, and review dates. Drive adoption of approved security patterns and reduce avoidable design variation, recurring control gaps, and implementation ambiguity. Communicate architecture risks, decisions, and requirements clearly to technical teams, business stakeholders, governance forums, and leaders. THE QUALIFICATIONS Proven skills, certifications, education, and/or experience: CISSP, CCSP, SABSA Chartered Security Architect, or equivalent cloud and security architecture certifications from Microsoft Azure, Google Cloud, or other recognized providers. Demonstrated experience creating secure design patterns and reference architectures that technology teams adopted in practice. Strong knowledge of application and API security, identity architecture, cloud architecture, network segmentation, privileged access, integration security, and data protection. Experience performing threat modeling, identifying trust boundaries and attack paths, and communicating risk to technical and business stakeholders. Experience with Microsoft Azure, Google Cloud Platform, on-premises, SaaS, and hybrid cloud architecture. Experience with retail and/or e-commerce security architecture, particularly payments #J-18808-Ljbffr