Information Technology- Security Architect

Manage on-premise and cloud-based infrastructure, virtual environments, endpoints, and hybrid Azure deployments across multiple sites.

Design and implement network security controls including next-generation firewalls (Fortinet / Palo Alto), IDS/IPS systems, VPN configurations, and zero-trust access models.

Configure and manage SIEM platforms such as Microsoft Sentinel or Splunk for real-time security monitoring and anomaly detection.

Conduct threat modeling, vulnerability assessments, and risk analysis using tools such as Nessus, Qualys, and Microsoft Defender for Endpoint.

Administer and monitor Fortinet-based IDS/IDP systems for network intrusion detection and prevention.

Lead incident response investigations including malware analysis, forensic review, root-cause analysis, and implementation of corrective security measures.

Develop, document, and test cybersecurity policies, disaster recovery procedures, business continuity plans, and incident response playbooks.

Ensure cybersecurity protections are enforced across Microsoft 365, Datto, Azure, and other cloud services.

Oversee biometric access control systems, CCTV, and physical security technologies in coordination with Facilities and Security teams.

Manage VoIP communications (Telus) and dedicated internet connectivity (Bell).

Proactively notify management of downtime, security incidents, or vulnerabilities, providing mitigation strategies.

Develop and maintain IT and cybersecurity-related SOPs aligned with GMP, EU-GMP, ISO 27001, NIST, and Health Canada compliance frameworks.

Support internal and external audits by Health Canada and other regulatory bodies, ensuring data integrity, audit readiness, and documented security controls.

Act as liaison to Canadian Radio Spectrum Management for licensing and communications compliance.

Ensure all third-party systems and integrations meet internal IT governance and regulatory security standards.

Deliver cybersecurity awareness training (phishing prevention, data protection, access control best practices).

Provide technical leadership to IT teams, promoting secure coding practices, system hardening, and vulnerability management.

Train employees on proper usage of ERP, seed-to-sale, and collaboration platforms.

Promote a culture of cybersecurity accountability and digital maturity organization wide.

Support Business Development Managers in optimizing marketing and social media operations through secure digital tools and automation platforms.

Identify and implement analytics and digital tools to enhance brand presence and ROI.

Coordinate with vendors and internal teams for structured cabling, hardware deployment, and infrastructure upgrades.

Build and maintain strong relationships with technology providers including IBM, Microsoft, Adobe, Datto, and other vendors.

Oversee SLAs, renewals, licensing, hardware procurement, and vendor risk assessments.

Ensure third-party systems comply with enterprise cybersecurity standards and regulatory requirements.

ITIL, PMP, or TOGAF (Enterprise Architecture / Project Governance)

CISM, CISSP, CEH (Cybersecurity Leadership)

ISO 27001 Lead Implementer / Lead Auditor

Microsoft Azure Security Engineer (AZ-500)

AWS, Azure, or Google Cloud security certifications

Familiarity with Ample Organics, NetSuite, or cannabis regulatory ERP systems is a strong asset

Location: Brooklyn, NS (Required)

Compensation: To be determined based on skills and experience

Status and Hours: Permanent,40 hrs per week to start; hours may increase as ongoing needs are assessed

Successful applicants must provide satisfactory background and reference checks.

Aqualitas welcomes and encourages diversity. Should you require accommodation in any aspect of our selection process, please let us know.

We appreciate the interest of all candidates; however, we will only be contacting those that best fit our requirements. Resumes will be kept for consideration for six months.