3 days ago
Vancouver, CanadaStaff+
Responsibilities
- Create reusable security patterns and reference architectures for identity, applications, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access.
- Lead security architecture reviews, identify trust boundaries and threats, and define implementable security requirements and acceptance criteria.
- Design secure architectures for retail and e-commerce capabilities, including customer identity, mobile and web applications, checkout, payment integrations, point-of-sale environments, commerce platforms, and third-party services.
- Perform threat modeling covering credential theft, authorization failures, data exposure, integration compromise, abuse scenarios, and attack paths.
- Define identity architecture for human and workload identities, federation, service accounts, privileged access, least privilege, secrets, and credential lifecycle management.
- Guide hybrid cloud security architecture across Microsoft Azure, Google Cloud Platform, on-premises platforms, SaaS services, and integrations.
- Architect secure AI adoption involving agents, MCP servers, retrieval systems, external inference services, tool execution, sensitive data access, human approval, and auditability.
- Define architecture-specific detection and response requirements for telemetry, logging, retention, correlation, alerting, and response capabilities.
- Translate PCI DSS and other compliance requirements into architecture decisions, control requirements, and evidence expectations.
- Document architecture decisions, exceptions, trade-offs, residual risks, compensating controls, accountable owners, and review dates.
- Drive adoption of approved security patterns and communicate architecture risks, decisions, and requirements to technical teams, business stakeholders, governance forums, and leaders.
Requirements
- Relevant cybersecurity or cloud architecture certification such as CISSP, CCSP, SABSA Chartered Security Architect, Microsoft Azure certification, Google Cloud certification, or an equivalent credential.
- Demonstrated experience creating secure design patterns and reference architectures adopted by technology teams.
- Strong knowledge of application and API security, identity architecture, cloud architecture, network segmentation, privileged access, integration security, and data protection.
- Experience with threat modeling, trust boundaries, attack paths, and communicating risk to technical and business stakeholders.
- Experience with Microsoft Azure, Google Cloud Platform, on-premises, SaaS, and hybrid cloud architecture.
- Experience with retail or e-commerce security architecture, especially payments, customer identity, point-of-sale, mobile commerce, and consumer-facing applications.
- Experience with secure development, CI/CD, software supply chain security, and connecting architecture requirements to engineering implementation.
- Practical experience or strong familiarity with agentic AI architectures, including agents, MCP integrations, retrieval systems, workload identity, tool access, controlled execution, and external inference services.
- Commitment to learning and applying Aritzia’s Business and People Leadership principles.
Benefits
- Product discounts and exclusive private shopping events.
- Up to 16 weeks of paid baby leave.
- Subsidized on-site dining at the A-OK Commissary & Cafe.
- Access to an in-office fitness studio and gym with classes and optional personal training.
- 24/7 virtual wellness resources supporting physical, mental, social, and financial wellbeing.
- Aspirational, dog-friendly office workplaces.
- Office amenities including a private parent’s room, showers, bike rooms, and other conveniences.
- Additional perks including dry-cleaning, hotel and restaurant discounts, self-care promotions, and on-site medical care.
Tech Stack
Categories
About Aritzia
Aritzia is a Canadian fashion retailer and design house that sells in-house apparel and accessories direct to consumers online and in boutiques. Founded in 1984 and headquartered in Vancouver, it operates an e-commerce site and more than 140 stores across North America. Aritzia is a public company listed on the Toronto Stock Exchange (TSX).