Technology - Senior Architect/Architect, Cybersecurity

We are Everyday Luxury™.

It's what we do and how we do it — together.

It's working alongside world-class talent in pursuit of world-class results.

It's maximizing your potential in a high-performance culture.

It's knowing that wherever you are, you belong.

It's elevating your world — and the world of those who love and will love Aritzia.

It's You. And an endless runway of opportunity.

With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America — including Toronto, New York, Los Angeles and Seattle — our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best — with us.  

The mission of the Cybersecurity Department is to deliver high‐quality cybersecurity services and solutions that minimize risk across Aritzia’s systems and data.

Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing, engineering, and enabling secure technology solutions that protect Aritzia’s systems and data, reduce cybersecurity risk, and enable the business to operate and innovate securely. As the Senior Architect/Architect, Cybersecurity, you will define secure architectures, reusable security patterns, and reference architectures across Aritzia’s retail, eCommerce, enterprise, cloud, SaaS, and integration environments. You will partner with business and technology teams to evaluate risk, establish proportionate security requirements, and guide solutions from early design through implementation and assurance. With your valuable contribution to the business in this role, the opportunities are endless, from a rewarding career in Cybersecurity to continued growth and development with Aritzia.

As the Senior Architect/Architect, Cybersecurity, you will:

• Create practical, reusable security patterns and reference architectures for identity, applications, APIs, integrations, cloud platforms, data protection, network segmentation, and privileged access.
• Lead security architecture reviews for proposed and changing solutions, identify trust boundaries and threats, and define clear, proportionate, implementable security requirements and acceptance criteria.
• Design secure architectures for retail and e-commerce capabilities, including customer identity, mobile and web applications, checkout, payment integrations, point-of-sale environments, commerce platforms, and third-party services.
• Perform threat modeling to evaluate abuse scenarios, credential theft, authorization failures, data exposure, integration compromise, and attack paths across connected systems.
• Define identity architecture for human and workload identities, federation, service accounts, privileged access, least privilege, secrets, and credential lifecycle management.
• Guide consistent hybrid cloud security architecture across Microsoft Azure, Google Cloud Platform, on-premises platforms, SaaS services, and supporting integrations.
• Architect secure AI adoption by defining trust boundaries and control patterns for agents, MCP servers, retrieval systems, external inference services, tool execution, sensitive data access, human approval, and auditability.
• Define architecture-specific detection and response requirements, including required telemetry, logging, retention, correlation, alerting, and response capabilities.
• Translate PCI DSS and other applicable compliance requirements into architecture decisions, control requirements, and evidence expectations.
• Document architecture decisions and exceptions, including trade-offs, residual risks, compensating controls, accountable owners, and review dates.
• Drive adoption of approved security patterns and reduce avoidable design variation, recurring control gaps, and implementation ambiguity.
• Communicate architecture risks, decisions, and requirements clearly to technical teams, business stakeholders, governance forums, and leaders.

The Senior Architect/Architect, Cybersecurity has:

• Proven skills, certifications, education, and/or experience:
  • CISSP, CCSP, SABSA Chartered Security Architect, or equivalent cloud and security architecture certifications from Microsoft Azure, Google Cloud, or other recognized providers.
  • Demonstrated experience creating secure design patterns and reference architectures that technology teams adopted in practice.
  • Strong knowledge of application and API security, identity architecture, cloud architecture, network segmentation, privileged access, integration security, and data protection.
  • Experience performing threat modeling, identifying trust boundaries and attack paths, and communicating risk to technical and business stakeholders.
  • Experience with Microsoft Azure, Google Cloud Platform, on-premises, SaaS, and hybrid cloud architecture.
  • Experience with retail and/or e-commerce security architecture, particularly payments, customer identity, point-of-sale, mobile commerce, and consumer-facing applications.
  • Experience with secure development, CI/CD and software supply chain security, and the intersection between architecture requirements and engineering implementation.
  • Practical experience or strong working familiarity with agentic AI architectures, including agents, MCP integrations, retrieval systems, workload identity, tool access, controlled execution, and external inference services.
  • A commitment to learn and apply Aritzia's Business and People Leadership principles

Aritzia is an Equal Employment Opportunity employer. Our goal is to be inclusive, diverse, and representative of the communities where we work while creating an environment where every person can enjoy a successful career. This commitment applies to all candidates and employees regardless of race, ethnicity, citizenship, creed, place of origin, religion, sex, gender identity, gender expression, sexual orientation, family status, marital status, disability, age, and any other protected characteristic. 

Requests for accommodation due to a disability or any other protected characteristic can be made at any stage of the recruitment process and during employment by contacting our People & Culture Team.

We’re committed to making your experience positive and transparent. Please note, our recruiters will only contact you using an @aritzia.com email address. If you receive recruitment-related messages from other domains, please disregard them.