Security Architect

Overview

Explore the Nortal Experience ✨  

 

🍃  Say Goodbye to Micromanagement: We champion autonomy, open communication, and respect for diversity as our core values.  🎯 Outcomes Over Hours: We believe in a work model focused on impact, providing you with the flexibility to balance your professional success with your personal well-being.  🌐 Vibrant Community: Join our close-knit US remote team and connect through tech talks, virtual coffee breaks, and team-building activities.  ⚖️ Support from Day One: Our People Care team is here to support you throughout your journey, from wellness check-ins to professional growth.  

 

What’s in it for you? 🎁  

 

🏥 Comprehensive Health & Dental Coverage: Robust medical, dental, vision, paramedical services, prescription drugs, and travel coverage to support your overall well-being.  

🧠 Mental Health & Wellness Support: Access to mental health resources, wellness programs, and additional support to help you thrive both personally and professionally.  

💳 Flexible Spending Accounts (myHSA): Annual employer-funded Health & Wellness Spending Accounts, allowing you to customize how you spend on medical and wellness needs.  

💼 Retirement Savings Plan (RRSP): Company-supported RRSP program with Manulife Financial to help you plan and invest in your long-term financial future.  

🛡️ Life, Disability & Critical Illness Insurance: Employer-paid life insurance, short- and long-term disability coverage, and critical illness protection for added peace of mind.  

🌴 Paid Time Off & Holidays: Competitive vacation policy, paid public holidays, and leave options that support work–life balance.  

📚 Learning & Professional Development: Access to technical certifications, global learning platforms, a digital library, and continuous development opportunities.  

 

About the role:  

 

Are you a visionary and highly experienced Security Architect looking to lead the design and implementation of a cutting-edge preventative security platform across diverse cloud and hybrid environments? 

 

As a Lead Security Architect, you will spearhead the technical design, integration, and optimization of our cloud security program, focusing on consolidating capabilities and enhancing our clients’ security postures against evolving threats. This is a critical leadership role where you will shape the future of cloud security defense for our clients, ensuring the confidentiality, integrity, and availability of their digital assets.  

 

You will also bring a proven track record in designing complex, integrated security solutions, deep expertise across major cloud platforms (Azure, AWS, GCP), and a strong understanding of modern security concepts like CNAPP, Zero Trust, and DevSecOps. 

 

In this role you will work closely with engineering, operations, and security teams, as well as potential external partners, to translate strategic security objectives into a robust, scalable, and actionable technical architecture.  

Responsibilities

✅ Lead the design and definition of the comprehensive technical architecture for preventative cloud security platforms, including the integration strategy for core components like Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWP), and Security Information and Event Management (SIEM/SOAR) platforms. ✅ Architect the seamless integration of various security tools, including platforms like Wiz and Microsoft Defender for Cloud, ensuring data flows, correlation, and actionable insights across multi-cloud (Azure, AWS, GCP) and hybrid environments, including container orchestration platforms.  ✅ Define the technical approach for enhancing visibility, risk prioritization, and threat detection, leveraging concepts like Security Graphs, attack path analysis, and contextual vulnerability management to identify critical risks and "toxic combinations". ✅ Develop and optimize security policies, rules, and configurations within the integrated platform components to minimize false positives, ensure compliance with industry standards and regulations (e.g., CIS, NIST, PCI DSS, HIPAA, GDPR, SOC 2), and align with organizational security requirements. ✅ Collaborate with Security Operations Center (SOC) teams to define operational models, incident response procedures, and