Security Engineer / Architect

The opportunity

Chartwell Retirement Residences is looking for a hands-on Security Engineer / Architect to help design and strengthen security across identity, M365, AI, networks, and endpoints.

This role is well suited to an experienced security engineer who has delivered technical solutions and is ready to take broader ownership of security design. You will work with security, infrastructure, and application teams to turn business needs and risks into practical designs, guide implementation, and improve Chartwell’s security standards over time. Identity and access management will be a major focus.

What you will do

• Design and improve identity controls across Active Directory, including authentication, single sign-on, federation, MFA, Conditional Access, privileged access, and user access lifecycles.
• Develop security designs, standards, and implementation guidance for Microsoft 365, including Purview (DLP, sensitivity labels).
• Review new applications, cloud services, infrastructure changes, and vendor solutions. Identify risks early and recommend controls that teams can implement and operate.
• Advance Zero Trust practices across identity, endpoints, networks, and data, including secure access and network segmentation.
• Work with security operations to improve logging, detection, and response coverage. Use incident findings to strengthen designs and controls.
• Produce clear architecture documents, diagrams, standards, and design decisions. Explain options and trade-offs to engineers, business partners, and leadership.
• Assess the security implications of AI-enabled tools and help establish appropriate access, data protection, and monitoring controls.
• Stay involved through implementation, testing, and operational handoff so that designs work in practice.

What you bring

• A completed post-secondary degree or diploma in computer science, information technology, cybersecurity, engineering, or a related technical discipline.
• At least six years of hands-on experience in security engineering or security-focused infrastructure or cloud engineering. A current Security Architect title is not required.
• Direct experience configuring and managing identity services, particularly Active Directory and ADFS. Experience with Conditional Access, MFA, SAML, OIDC, OAuth integrations, privileged access, and access governance is especially valuable.
• Experience securing Microsoft 365 and working with endpoint, email, web, or network security controls.
• The ability to assess a technical problem, develop a sound security design, and work with others to implement it.
• Clear communication and documentation skills, including the ability to explain technical risks and decisions to different audiences.

Additional experience that would be valuable

• Data protection, DSPM or data lifecycle governance capabilities.
• Secure access or network security platforms such as Cisco Umbrella or Cisco Secure Access; email security such as Proofpoint; or endpoint security such as CrowdStrike.
• Security frameworks such as NIST CSF or CIS Controls, and certifications such as CISSP, CISM, CCSP, or relevant Microsoft credentials.
• Experience assessing AI-enabled applications or agentic systems.

Working Conditions

• Hybrid working arrangements with a minimum of 2 days in the office per week
• Occasional need to work outside of office hours
• #INDCOR