Infrastructure Security Consultant

Job Title: Infrastructure Security Consultant

Location: Regina, Saskatchewan, Canada

Work Model: 100% on-site required (no remote/hybrid at start)

Duration: 1 year

Extension: up to two 1-year extension options

Must Haves

• Sustained, full-time working history in an IT-related field - not academic, training, or side-project experience
• 8 10+ years, with no unexplained gaps
• Has personally designed technical solutions, not just implemented someone else's design
• Comfortable producing and defending architecture artifacts: solution designs, technical standards, integration patterns, design decisions with documented rationale
• Experience spans more than one project or client - evaluators explicitly reject "one long tenure" answers with no breadth
• Has held a role with the title or functional responsibilities of an IT/Solutions/Security Architect - not a generalist engineer who occasionally touches architecture
• Can point to specific responsibilities: technical governance, architecture review board participation, standards-setting, cross-team technical direction
• Direct working experience with the Government of Saskatchewan, or a comparably structured public-sector/government/Crown entity (municipal, provincial, or federal)
• Genuine familiarity with a government technical and business landscape: procurement processes, legislative/policy constraints (e.g., freedom of information, privacy law), multi-ministry or multi-branch coordination
• Vague "worked with government clients" claims won't score - needs specific, named engagements and a believable narrative of the environment
• Has served as lead architect or owned a major subsystem on at least one large-scale engagement (not a supporting/contributing architect role)
• Worked under a formal IT methodology (e.g., TOGAF, SABSA, an enterprise architecture framework) rather than ad hoc design
• Delivered within a standard framework for information security controls (ISO 27001/27002, NIST CSF/800-53, CIS Controls, or equivalent) - this needs to show up explicitly, not be assumed

Description / Responsibilities / Skills

About the Role

• Reduce security risk across the Government of Saskatchewan's critical information systems as those environments are redesigned and renewed.
• Lead, from a cybersecurity perspective, the upgrade and renewal of government's critical IT environments.
• Participate in the Government's Cybersecurity Maturity Security Program.
• Provide cybersecurity oversight on customer initiatives.
• Support the retirement of legacy environments.
• Take on other information security, infrastructure renewal, and security architecture initiatives as assigned.

Senior IT Architect track record - heavily weighted

• Delivered within a standard framework for information security controls (ISO 27001/27002, NIST CSF/800-53, CIS Controls, or equivalent).
• The solution - or a meaningful portion of it - was actually implemented, not just designed or proposed.

Experience & Skill Set Requirements

Additional Qualifications (scored, strengthens the submission)

• In-depth knowledge of an industry-standard information security framework (ISO 27002 or equivalent) - distinct from R2's requirement, this probes depth of knowledge rather than just applied use
• DevSecOps experience: security automation integrated into enterprise CI/CD, supporting both development and deployment
• Familiarity with multiple architecture methodologies (e.g., TOGAF, Zachman, SABSA) and the ability to articulate trade-offs between them
• Broad exposure across technology domains (network, cloud, identity/access, endpoint, data) and how each is securely implemented
• Formal training in a recognized IT design methodology, with real experience applying it on an engagement
• Architecture certification: TOGAF, SABSA, or a similar industry-recognized credential
• Full-lifecycle IT Architect experience - involved from strategy and planning through design, implementation, and ongoing management of at least one project
• Track record leading incident/problem management by coordinating across teams to resolve issues efficiently
• Demonstrated experience applying current thinking on key trends (integrations, data management, technical governance) in real solutions
• Bachelor's degree or equivalent professional business experience in a technical field (asset)
• Completion of at least one formal project management course (asset)

Senior IT Architect track record - heavily weighted

• The solution - or a meaningful portion of it - was actually implemented, not just designed or proposed.