Principal Security Architect

Accountabilities:: Conduct security design reviews covering broad product architecture, individual product changes, cloud infrastructure, and AWS integrations. Perform security-focused code reviews and identify potential weaknesses, vulnerabilities, and secure coding improvements. Design and document processes for integrating and deploying enterprise Hardware Security Modules and key management solutions. Assess third-party software, SaaS providers, and external technologies from a security and architectural perspective. Review the design and implementation of integrations with third-party software and SaaS platforms, identifying security risks and recommending appropriate controls. Oversee internal and external security assessments and coordinate technical follow-up on identified findings. Perform in-depth analysis of vulnerabilities, assessing the potential impact of both third-party and product-specific security issues. Monitor emerging technologies, web standards, and browser behavior changes and assess their potential impact on products and security architecture. Support compliance and sales teams with technical security expertise related to regulations, customer requirements, RFPs, and security questionnaires. Participate in detailed technical discussions with customers regarding security architecture, controls, vulnerabilities, and product capabilities. Contribute to patent development through technical invention documentation, review, and collaboration with relevant teams. Create and review technical materials for external audiences, including security blogs, white papers, presentations, and other technical content. Collaborate with engineering and R&D teams to develop innovative product features and capabilities within the security domain. Maintain a strong awareness of evolving cybersecurity threats, technologies, standards, and best practices. Requirements: Advanced knowledge of applied cryptography, including technologies such as Hardware Security Modules (HSMs) and Trusted Platform Modules (TPMs). Strong understanding of the complete key management lifecycle, including key generation, storage, distribution, backup, rotation, revocation, and destruction. Deep expertise in web and browser security technologies, including the Same-Origin Policy, XSS, CSRF, HTTP security headers, browser architecture, and JavaScript engine internals. Thorough understanding of networking and operating-system fundamentals, including TCP, HTTP, TLS, DNS, firewalls, WAFs, discretionary and mandatory access controls, and sandboxing. Strong AWS security experience, including IAM, AWS Organizations, EC2, VPC, and related cloud security capabilities. Familiarity with static and dynamic application analysis concepts, methodologies, and tools. Advanced proficiency in C/C++, particularly secure coding practices, along with strong experience in at least one additional programming language, preferably Python or JavaScript. Demonstrated ability to investigate complex technical security problems hands-on and take ownership of finding practical solutions. Strong architectural thinking and the ability to evaluate security implications across products, infrastructure, integrations, and emerging technologies. Excellent communication skills and the ability to explain complex security concepts to engineering teams, customers, executives, compliance teams, and other non-specialist audiences. Ability to collaborate effectively across technical and business functions and contribute to high-impact security decisions. Master's degree in computer science, engineering, cybersecurity, or a related discipline, or equivalent experience; a PhD is preferred. A proactive, ownership-oriented approach with a willingness to work hands-on when required to solve challenging security problems. Benefits: Competitive base salary of approximately CAD $158,000–$263,000 annually. Actual compensation may vary based on factors such as experience, knowledge, skills, abilities, and location. Eligibility for stock-based compensation grants based on company and individual performance. Remote-first work environment for employees based in Canada. Opportunity to work on complex security challenges spanning cloud infrastructure, browser technologies, cryptography, networking, and emerging technologies. Exposure to enterprise customers and large-scale security environments. Opportunities to contribute to security innovation, technical publications, patents, and new product capabilities. Collaborative environment emphasizing ownership, direct communication, cross-functional teamwork, technical excellence, and customer-focused outcomes. Equal opportunity employment environment focused on merit, competence, performance, and business needs.