Enterprise Architect – Cybersecurity (Senior Staff Developer)
What We Do:
iQmetrix’s intelligent retail management software is designed to power sales of connected devices. Our best-in-class software is built around enabling retailers to deliver a buy-anywhere strategy for a consistent customer experience—in-store, online, and anywhere else. iQmetrix’s retail management solutions powered $15.5BN in sales last year and are used by 425,000 retail professionals across 1,200-plus clients. We are a privately held software-as-a-service (SaaS) company with offices across Canada and the US. Learn more at iQmetrix.com.
How We Do It:
We are on a self-management journey. As we work to move away from the restrictions of hierarchy, teams are building collaborative peer-based networks where there are no bosses. Decisions are meant to be distributed to the people who are best able to make the decisions which means more freedom for individuals to contribute at their highest levels. We are purpose-driven, helping individuals connect to meaning in their day-to-day work. Additionally, we are currently on the road to building a diverse and inclusive environment. Working at iQmetrix means always looking at ways to be better.
Want more jobs like this?
Get Software Engineering jobs in Winnipeg, Canada delivered to your inbox every week.
Reports To: Enterprise Architecture Team Lead
Team Description:
The Enterprise Architecture (EA) team is responsible for charting the course of enterprise technology and assisting development teams to solve their most complex and interdependent problems. As a team, we set the roadmap of technical innovation while considering the requirements of multiple systems and product teams. In short, the EA team influences the entire organization.
The EA team attends to several facets of the technology landscape of iQmetrix, working closely with talented Technical Architects of the many development and engineering teams. Team members have complimentary skills to support a hybrid multi-cloud model that spans the globe.
Members of the team are attentive to fostering holistic solutions, that contribute to the thriving of the engineers who are inspired and empowered to build innovative features. This means that the team is accountable for a spectrum of considerations such as aligning business and technology goals, ensuring mechanism are in place for timely and accurate awareness of the pillars of well-architected environment, supporting a distributed architecture practice and covering healthy governance constructs.
Job Summary:
As a member of the Enterprise Architecture Team, you are responsible for exploring and driving transformations related to increasing iQmetrix’s security posture.
Collaboration and Support: The Enterprise Architect plays a collaborative role where they work closely with multiple product teams, gathering requirements, exploring solutions, and mentoring teams and individuals in the implementation of the iQmetrix technical roadmap.
Responsibilities:
- Contributing security considerations to the organization-wide technical roadmap with a view to 3 horizons and an appropriate maturity model
- Defining and communicating the security priorities across the spectrum of leadership audiences (C-Suite and Technical Leadership)
- Understanding solution architecture and facilitating the practice of Architectural Decision Record Keeping
- Having a thorough understanding of our mission-critical systems
- Engaging with product teams to address technical and architectural challenges for delivering secure services
- Provide technical direction (standards & guidelines) that is holistic, contributes to a thriving environment and promotes innovation
- Establishing capabilities that are measurable and actionable in terms of the 5 pillars of a well-architected environment (CORPS)
- Continuous communication that inspires and triggers positive impact
- Conversant and effective in communicating best practices for defensive coding & scripting practices (e.g., C#, T-SQL, JavaScript, Python, Java)
- Proactively collaborate in a multi-disciplinary organization consisting of Software Engineers, Program Managers, Security Researchers, and Data Scientists
- Providing security related awareness and guidance for building and delivering healthy distributed services
- Facilitating the use of security best practices in the configuration and development of CI/CD
- Developing Proof-of-Concept artifacts where appropriate and needed
- Keeping up to date with privacy policies for target markets
- Using the knowledge to ensure responsibilities are aligned with data privacy obligations
- Understanding and keeping current with software development tools such as source control systems, automated build systems, compilers, software validation systems, project tracking, test automation tools, and lifecycle management systems
- Maintaining currency of security related certifications relevant to role
- This includes specialization in cloud vendor accreditations (Azure / AWS)
- Identifying and transforming organizational capabilities using Risk and Threat Modelling techniques
- Participating in RCA Reviews and related security triage processes
- Introducing, refining and sunsetting processes as appropriate for operational excellence in delivering secure services.
Qualifications:
- A bachelor's or associate degree in IT, computer science, or related field (or comparable experience)
- IT security certifications (e.g., GIAC | CSSLP | CRTSA | CNDA | GDSA | Azure Security Certs | AWS Security Certs)
- Experience with security-related audit standards (e.g., PCI-DSS | SOC 2 | ISO 27001 | NIST)
- Familiarity with common security authorities (e.g., OWASP)
- Familiarity with static and dynamic application security testing practices and technologies
- Demonstrated experience in working in environments that demand knowledge of:
- Microservices
- Asynchronous messaging
- Working and current experience with Microsoft Defender and Microsoft SIEM (or comparable experience)
- Roadmap planning
- Communicating to C-Suite and Technical Leaders
- Leading & delivering risk and threat modeling initiatives
- Previously established a distributed security practice (advantageous)
- Developing and championing security standards for application development, design, and architecture
- Incorporating application security into the SDLC and assisting with the adoption of security practices into the SDLC
- Investigating and evaluating tools and technologies to establish efficiencies in maintaining security practices, threat detection, and threat remediation / mitigation
- Effective leadership skills and ability to listen, communicate and motivate teams
- Experience in nurturing talent within the organization on security concepts and approaches
What is an iQer?
An iQer is a term, used daily across all iQmetrix locations, is someone who works for iQmetrix. Sounds simple, but there is more to being an iQer than meets the eye!
If you are an iQer, you approach problems with humility and an open mind. You are an enterprising person who does not wait around to be told what to do. Whether it is on your own or with a team, you are not afraid to try new things, fail, succeed, and improve along the way. Your team, the company, and the well-being of others come before your personal agenda—you are an ally to your colleagues and the community.
The world changes fast and, as an iQer, you are ready to adapt. You recognize diversity in the world, listen to others, and consider all perspectives.
Want to Join the Team?
If you are interested in a career with iQmetrix, please submit your resume and cover letter. We are an equal opportunity employer. We do not discriminate based on race, faith, color, cultural background, gender, sexual orientation, age, marital status, or disability status. We thank all applicants for their interest, however, only those selected for an interview will be contacted.
We are a hybrid work environment, remote and in-office for all employees in an office city.