KUBRA is seeking a highly skilled Senior Security Architect to design,
implement, and oversee enterprise-grade security solutions across our cloud and
hybrid environments. The ideal candidate will have deep expertise in cloud
security, IAM, threat modeling, network security, and containerized
architectures. You will be a trusted advisor to engineering and leadership
teams, ensuring our systems and applications are secure by design and resilient
against evolving threats.
This is a hybrid opportunity in Mississauga, ON.
\n
What you get to do every day!
- Shape Security Architecture: Design and review security across applications,
cloud platforms (AWS), and databases — ensuring scalable, secure solutions.
- Be a Trusted Advisor: Partner with DevSecOps, Engineering, and Infrastructure
teams to guide secure coding, threat modeling, CI/CD security, and IaC best
practices.
- Lead Assessments & Reviews: Conduct architecture assessments, penetration
testing, and code analysis to proactively identify and mitigate risks.
- Protect What Matters: Define and implement data protection, network security,
and cloud-native controls (firewalls, WAFs, IDS/IPS, DDoS defense,
encryption, and monitoring).
- Drive Security Strategy: Establish enterprise-wide security policies,
standards, and frameworks aligned with industry best practices and compliance
requirements (PCI-DSS, SOC 1/2, ISO 27001).PCI-DSS, SOC 1/2, ISO 2
- Stay Ahead of Threats: Monitor emerging risks, lead incident response
efforts, and provide expertise in forensics and remediation.
- Influence & Mentor: Guide cross-functional teams, champion secure-by-design
practices, and help shape the future of security at KUBRA.
What kind of person should you be?
- 7+ years of cybersecurity experience, with deep expertise in security
architecture, cloud, and application security
- Strong knowledge of cloud security frameworks (AWS Well-Architected, CSA-CCM,
CIS Controls)
- Experience securing cloud-native applications, microservices, and containers
(Kubernetes, Docker)
- Expertise in secure development practices (OWASP Top 10, SAST/DAST)
- Familiarity with DevSecOps principles & tools (Terraform, GitHub Actions, AWS
CodePipeline)
- Hands-on experience with IAM, encryption, and key management
- Proficiency in scripting & automation (Python, Bash, PowerShell)
- Experience with network and database security (firewalls, relational & NoSQL
best practices, secure architecture design)
- Experience with Infrastructure as Code (IaC) security & automation
(Terraform, CloudFormation, etc.)
- Bachelor’s/Master’s degree in Computer Science, Cybersecurity, or related
field
- Certifications such as CISSP, CCSP, AWS Security, or GIAC are a strong plus
What skills do you need?
- Exceptional communication skills — able to clearly articulate complex
security concepts to both technical and non-technical audiences.
- Sharp analytical mindset — skilled at cutting through noise to identify and
prioritize critical security events.
- Multitasking under control — thrive in fast-paced environments, managing
multiple projects without losing focus or quality.
- Strategic project leadership — proven ability to plan, drive, and deliver
complex security initiatives on time.
- Strong organizational discipline — adept at balancing priorities with
excellent time management and problem-solving abilities.
- Calm under pressure — remain composed, decisive, and effective even in
high-stakes security situations, working independently when needed.
What can you expect from us?
- Award-winning culture that fosters growth, diversity and inclusion for all
- Annual performance-based bonus
- Paid vacation
- Paid day off for your birthday
- Two paid days for volunteer opportunities
- Flexible schedules
- Generous benefit coverage with low premiums (+ a Health Care Spending
Account)
- RRSP Matching
- Access to LinkedIn learning courses
- Continued education with our education reimbursement program
- Free unlimited access to our refreshment stations (fully stocked with tea,
coffee and other beverages)
- A free premium membership for ‘Headspace’; an app geared towards mental
health and wellbeing
- Access to Perkopolis retail discounts
\n
KUBRA is an equal opportunity employer dedicated to building an inclusive and
diverse workforce. We will provide accommodations during the recruitment process
upon request by emailing recruitment-team@kubra.com
[recruitment-team@kubra.com]. Information received relating to accommodation
will be addressed confidentially. We thank all applicants for their interest;
however, only candidates under consideration will be contacted.
STACK2024
While we value the skills and experiences listed in our job requirements, we
also recognize that talent comes in many forms, and welcome applications from
candidates who meet most but not all specified requirements. If you possess a
strong desire to learn and grow in a dynamic work environment, apply now!
KUBRA is a fast-growing company that delivers customer communications solutions
to some of the largest utility, insurance, and government entities across North
America. KUBRA offers billing and payments, mapping, mobile apps, proactive
communications, and artificial intelligence solutions for customers. With more
than 1.5 billion customer interactions annually, KUBRA services reach over 40%
of households in the U.S. and Canada. KUBRA is an operating subsidiary of
Hearst.
Our office is small enough to allow creative individuals to flourish, yet large
enough to provide long-term stability. We place a tremendous amount of
responsibility on our team members to be productive, focused and self-motivated.
We offer a casual work environment, competitive compensation and a stellar
benefits program.
KUBRA does not typically provide immigration-related assistance, including
employment-based work visa (e.g. H-1B) sponsorship, work permit applications and
extensions, permanent residence (green card) sponsorship, LMIA applications or
permanent residency nominations. Candidates must ensure they have legal
authorization to work in the U.S/ Canada. All sponsorship determinations are
case by case based on business need.