Senior IT Security Design Specialist

Job Description Company Description

Founded in 1967, ADGA is a privately owned and operated Canadian company. We employ over 700 highly skilled team members who apply their knowledge and expertise in service delivery of advanced technology solutions for clients in the Defence, Security and Enterprise Computing markets across Canada.

Celebrating over 50 years in business, we are proud to be one of Canada’s most trusted professional engineering and consultancy firms. Our clients continue to rely on ADGA to provide subject matter expertise, and quality talent to fulfill their business objectives. We have done so successfully by anticipating and responding to the constant changes in technology, and evolving with agility.

Our culture of commitment, trust, and accountability guides our business, fosters our growth, and is at the core of our relationships with clients, employees and consultants. Whether your projects are complex, large-scale requirements, or dependable, professional resources to execute on time, and on budget, you can count on ADGA to deliver. We are dedicated to your success.

Job Description

ADGA has a current contract opportunity for a Senior IT Security Design Specialist to provide services within IT Security Architecture and Security Assessment of IT Infrastructure & Services.   The consultant will be working in partnership with all stakeholders to ensure security is implemented early into the design; to identify technical architecture, challenges, risks, provide recommendations and security assessment services for various infrastructure projects.  

This includes, but not limited to, deliverables such as helping to define and standardize methods of assessment and risk terminology, tailoring of security controls for infrastructure services, assessment/validation of the implementation of the security controls into the architecture design documentation, assessment/validation of security mitigation effectiveness, assessment/validation of the effectiveness of security controls in development, preproduction & production environments, preparing security assessment plans, risks registers, weekly assessment reports, security requirements traceability matrices (SRTMs), Security Control Traceability Matricies (SCTM) and security assessment reports.

Job Requirements Qualifications

• 10+ years of professional working experience within the field of IT Security Design
• Project experience in the Security Control incorporation to Technical Architecture
• project experience direct working knowledge of the, Enterprise Security Architecture, Technical Architecture
• Direct experience developing the following artefacts: Enterprise Architecture views, Security Control Profile, Design Specifications, Statement of Sensitivity, Asset Categorization, Threat modeling, Statement of Acceptable Risk.
• Validation of the following: Assessment of GC Cloud Guardrails, Assessment of security in High Level Design and Detail Design documentation, Assessment of security threats, Assessment of mitigation strategies, Assessment of residual risk, Assessment of Integration Security Testing.
• Experience developing and updating security design and or assessments for IT Systems* other than in house developed software solutions.
• Recent knowledge and experience in authoring a minimum of 2 security assessments for IT Systems using methodologies defined in ITSG-33
• Experience performing the following IT Security tasks: Analysis of IT Security tools and techniques, Analysis of security data and provision of advisories and reports, Preparation of technical documentation such as reports, requirement analysis, options analysis, technical security architecture documents, risk modeling and security requirements traceability matrix, Reviewing and incorporating recommendations (into deliverables) from threat and risk assessment of IT systems, Security architecture design and engineering support.

Additional Information