Senior AI Security Cloud Architect

Position Description:

CGI is seeking a Senior AI Security Cloud Architect to join our growing team in Atlantic Canada. This is a senior-level consulting and technical leadership role responsible for designing, securing, and governing enterprise cloud and AI solutions for public and private sector clients. The successful candidate will lead the architecture, security, identity management, and modernization strategies that enable secure adoption of cloud-native and AI-enabled platforms across Azure and AWS environments.

Working closely with business stakeholders, delivery teams, security specialists, and client executives, the Senior AI-Security-Cloud Architect will define target-state architectures, establish security controls, conduct threat modeling and security reviews, and ensure compliance with organizational and regulatory requirements. The role requires deep expertise in cloud infrastructure, identity and access management (IAM), Zero Trust principles, AI service integration, and security governance.

Your future duties and responsibilities:

• Lead the architecture, design, and implementation of secure cloud and AI solutions across Azure and AWS platforms.

• Design and oversee enterprise-scale identity and access management architectures, including Entra ID, Azure AD B2C, Keycloak, OAuth2/OIDC, and SAML integrations.

• Develop cloud security strategies aligned with Zero Trust principles and industry best practices.

• Conduct threat modeling, security architecture reviews, risk assessments, and technical governance activities.

• Architect cloud-native solutions leveraging Azure App Services, Azure Functions, Azure SQL, Blob Storage, Azure Files, Key Vault, and related Azure services.

• Design AWS-based solutions utilizing ECS/Fargate, Aurora PostgreSQL, S3, CloudFront, API Gateway, IAM, and VPC services.

• Guide the secure integration and deployment of Azure AI Services and AWS AI Services within enterprise environments.

• Implement security and monitoring capabilities including logging, auditing, alerting, and operational visibility frameworks.

• Design and review network, application, and perimeter security controls, including Azure Front Door, Web Application Firewall (WAF), and cloud security accelerators.

• Ensure cloud solutions meet client security, privacy, compliance, and regulatory requirements, including government security frameworks where applicable.

• Provide technical leadership and mentorship to solution architects, developers, security teams, and project stakeholders.

• Collaborate with client leadership teams to define technology roadmaps, cloud migration strategies, and modernization initiatives.

• Support proposal development, solution estimates, and client presentations as a subject matter expert in AI, cloud, and security architecture.

Required qualifications to be successful in this role:

• Minimum 5 years of experience in cloud architecture, cybersecurity, identity management, or related senior enterprise technology/lead roles.

• Proven experience designing and implementing enterprise solutions in Microsoft Azure and Amazon Web Services (AWS).

• Strong understanding of cloud-native architecture patterns, security controls, and governance frameworks.

• Hands-on experience with Azure:

  • App Services
  • Functions
  • SQL Database
  • Blob Storage
  • Files
  • Key Vault
  • Monitoring and Logging services
  • AI Services (asset)

• Hands-on experience with:

  • Microsoft Entra ID
  • AWS ECS/Fargate
  • Aurora PostgreSQL
  • Amazon S3
  • CloudFront
  • API Gateway
  • AWS IAM
  • Amazon VPC

• Experience designing enterprise IAM architectures and implementing authentication and authorization solutions.

• Knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, and federated identity patterns.

• Experience conducting threat modeling, security assessments, and architecture reviews.

• Strong understanding of cloud security principles, security governance, security operations, and risk management.

Asset Qualifications

• Experience with Azure AI Services and AWS AI Services, including secure AI solution design and governance.

• Expertise in Identity and Access Management (IAM) Security Controls and Zero Trust Architecture.

• Experience implementing Azure Front Door and Web Application Firewall (WAF) solutions.

• Knowledge of AWS Secure Environment Accelerator (ASEA) or similar secure cloud landing zone frameworks.

• Experience supporting public sector or highly regulated environments.

• Familiarity with Canadian government security requirements, standards, and compliance frameworks.

• Relevant certifications such as:

  • Microsoft Certified: Azure Solutions Architect Expert
  • Microsoft Certified: Cybersecurity Architect Expert
  • AWS Certified Solutions Architect – Professional
  • AWS Certified Security – Specialty
  • CISSP, CCSP, SABSA, TOGAF, or equivalent

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $75,000–$145,000. This role is a pipeline opportunity.

#LI-SSCGI

Use of the term ‘architect’ in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT architect-related functions, but licensure from an architect regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.

Skills:

• AWS S3

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.