RQ00824 Sr. Security Architect – Cyber Security I Ontario Health I Hybrid at Analyst Technical Solutions — NeverHard

RQ00824 Sr. Security Architect – Cyber Security I Ontario Health I Hybrid Job Title: RQ00824 Sr. Security Architect – Cyber Security Location: Toronto ON , Hybrid Pay Rate:95-101/hr Description Background Information The purpose of this request is to onboard a contingent cyber security resource to support the Director, Cyber Security Defence & Resilience, with operational and strategic initiatives across the Agency and the broader Ontario health sector. This role sits within the Agency’s broader AI-Driven Risk Program and mitigation plan, established to counter rapid increases in adversarial AI and machine-speed cyber attacks. The resource will focus on two primary, non-forensic areas: • Cyber Security Incident Response (CSIR): Enhancing program maturity, governance, day-to-day coordination, and stakeholder communication. • Zero Trust Implementation: Assessing current security architecture and driving hands-on operationalization of identity, access, and network controls. Responsibilities & Deliverables Cyber Security Incident Response (CSIR) Program • Mature the Program: Review, update, and standardize incident response (IR) policies, workflows, procedures, and playbooks in alignment with NIST standards. • Lead Coordination: Act as a lead responder and coordinator for confirmed internal and large-scale external cyber incidents affecting the healthcare sector. • Communications & Reporting: Build executive briefings, situational reports (SITREPs), and incident summaries. Guide communications with internal teams and external healthcare stakeholders. • Performance & Readiness: Define KPIs, track program metrics, lead post-incident reviews, and support tabletop simulation exercises. Adapt playbooks for AI-accelerated threats. Zero Trust Implementation & Operationalization • Gap Analysis: Assess current-state architecture to identify and document flaws in identity, access, and network security controls. • Hands-On Implementation: Lead the deployment, configuration, and integration of Zero Trust-aligned technologies alongside technical teams. • Focus Domains: Enforce practical controls surrounding identity (MFA, Conditional Access, PAM/PIM, RBAC) and network security (micro-segmentation, ZTNA). • Process Embedding: Translate abstract Zero Trust concepts into measurable, daily operational controls, ensuring architecture patterns integrate cleanly across identity, endpoint, and network domains. Required Skills & Experience • Experience: 7–10 years of dedicated experience in cyber security with strong exposure to CSIRT or SOC environments. • Incident Management: Proven experience leading and managing the full incident lifecycle, including cross-functional and external stakeholder coordination under high-pressure conditions. • Zero Trust Delivery: Demonstrated hands-on implementation experience with Zero Trust frameworks, specifically translating strategy into deployed infrastructure rather than just designing models. • Technical Toolsets: Strong working knowledge of the Microsoft security ecosystem (Entra ID, Defender, Sentinel) and AWS security tools (GuardDuty, Security Hub). • Modern Threat Awareness: Solid understanding of the modern AI-driven threat landscape, including machine-speed exploitation and attack vectors. • Education & Certifications: Relevant professional certifications (e.g., CISSP, CISM, GIAC, Azure Security Engineer). Desired Skills • Sector Knowledge: Prior experience working in public sector or healthcare environments (familiarity with PHIPA laws is a plus). • Frameworks: Strong familiarity with regulatory and security standards such as NIST CSF and ISO 27001. • Automation: Exposure to SOAR (Security Orchestration Automation and Response) platforms and automated incident workflows.