Security Architect – SAP & Enterprise Platforms, Identity & Access Management

Design robust SAP security models including roles, authorizations, and SoD controls.

Define SAP user lifecycle, privilege access, and logging/monitoring standards.

Advise on SAP GRC, access controls, emergency access (Firefighter), and compliance configuration.

Support SAP transformations (S/4HANA, cloud, RISE, hybrid landscapes).

Architect security controls for non SAP applications, APIs, middleware, and cloud services (IaaS, PaaS, SaaS).

Define standards for authentication, authorization, encryption, secrets management, and secure integrations.

Support IAM, SSO, MFA, and directory integrations (e.g., Entra ID, LDAP).

Design Joiner Mover Leaver (JML) processes and automated provisioning/deprovisioning.

Architect access governance controls including: User Access Reviews (UAR), Segregation of Duties (SoD), Role Based / Attribute Based Access Control (RBAC / ABAC)

Integrate IAM with HR, ITSM, and GRC platforms.

Architect secure authentication mechanisms (MFA, passwordless, conditional access).

Design federation and SSO integrations (SAML, OAuth 2.0, OIDC).

Support B2E, B2B, and B2C identity scenarios where required.

Design PAM architecture for administrative, service, and privileged user accounts.

Enforce least privilege, session monitoring, credential vaulting, and just in time access.

Integrate PAM controls across infrastructure, applications, and cloud platforms.

Align application security architecture with enterprise security frameworks and policies.

Support regulatory and audit requirements (e.g., SOX, GDPR, ISO 27001).

Perform threat modeling, security risk assessments, and control gap analysis.

Define security standards, patterns, and reference architectures.

Partner with application owners, developers, infrastructure, and cloud teams.

Act as a security SME for projects, incidents, and design reviews.

Contribute to security roadmap planning and technology selection.

Generous and complete benefit coverage with group insurance

Group retirement plan with employer contribution

Telemedicine and assistance program for employees and their families

Employee Share Ownership Plan with an employer match

Paid Parental Leave program

Paid time off: Sick days, floater days and volunteer day off

Opportunity to contribute to a collective RRSP & TFSA

Training and development programs

Saputo Flex Program, flexible work environment (schedule/location/time off) according to department needs

Organized activities for employees and their families

Advantageous discounts on Saputo products

All applications are carefully considered by our Talent Acquisition team.

Artificial Intelligence tools may be used in screening applications.

Artificial Intelligence is not used to assess or select applications.

In Canada, Saputo is a leading cheese manufacturer and fluid milk and cream processor, with a portfolio of well-loved brands such as Dairyland, Armstrong, Neilson, Alexis de Portneuf, and many more. Whether your expertise lies in manufacturing, operations, supply chain management, sales, quality assurance, or in any other function, your role is integral to our success. You will make contributions that matter, all while working alongside colleagues who genuinely care about your success and who will roll up their sleeves to help.

The material contained herein is provided for informational purposes only. All open jobs offered by Saputo Inc. and all companies, corporations, partnerships, limited partnerships and other entities controlled by Saputo Inc. (collectively, “Saputo”) on Saputo's web site are subject to specific job skill requirements. The job skill requirements, qualifications, and preferred experience are determined by a Saputo subsidiary, office or department, and all positions are subject to local prevailing employment laws and restrictions. This would include immigration laws pertaining to work authorization requirements and any other applicable government permissions or compliance. The materials on this site are provided without warranties of any kind, either expressed or implied, including but not limited to warranties regarding the accuracy or completeness of the information contained on this site or in any referenced links. While Saputo attempts to update this site on a timely basis, the information is effective only as of the time and date of posting. Strict confidentiality will be observed at all times. Saputo is an equal opportunity employer. The information on this site is for information purposes only and is not intended to be relied upon with legal consequence.

We support employment equity. Saputo strives to embed diversity and inclusion in its operations and invites candidates from all horizons to join its family. Saputo welcomes and encourages applications from people with disabilities. Accommodations up to the point of undue hardships, are available on request for candidates taking part in all aspects of the selection process.