*

Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation.

The SASE Solution Architect will play a key role in Air Canada’s cybersecurity program, responsible for designing and guiding the adoption of Secure Access Service Edge (SASE) capabilities across the enterprise. The role ensures secure, scalable, and resilient connectivity for branch offices, data centers, cloud workloads, and remote users. The Architect will define the technical standards, logical and physical designs, and security controls to support Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), SaaS Security Posture Management (SSPM), and Enterprise Browser solutions. This position will collaborate with internal teams and system integrators to deliver a future-state security architecture aligned to Air Canada’s strategy and compliance requirements.

Responsibilities\:

The SASE Solution Architect will undertake tasks as assigned by management. While the following outline key responsibilities, they may evolve with program needs\:

Architecture & DesignDefine enterprise SASE architecture, covering SD-WAN, ZTNA, SWG, CASB, SSPM, and related components.Assist in developing detailed physical and logical designs for LAN, WAN, Wi-Fi, routing, segmentation, and security policy enforcement.Align architecture with Zero Trust principles and Air Canada’s identity/security ecosystem (AD, SSO, MFA).Assist in the data gathering and persona definition for SASE use cases.Define and establish measurement capabilities for KPIs including policy enforcement success rate, latency impact, and threat detection coverage.Resiliency & MonitoringDesign and validate failover, disaster recovery, and resiliency scenarios.Ensure integration with other security tools like SIEM (Microsoft Sentinel) for monitoring, alerting, and reporting.Assist with the creation of automated and manual incident response playbooks for SASE use cases.Maximize the value of the SASE platform including AI-driven threat detection and response.Policy & Security ControlsMap current NGFW, segmentation, and policy models into the SASE/SD-WAN environment.Define and test DLP, URL filtering, threat protection, and data security policies across managed/unmanaged devices.Stakeholder EngagementCollaborate with network, security, cloud, enterprise architecture, and IT operations teams to ensure architecture meets SLA/SLO requirements.Collaborate with UX and endpoint teams to ensure a seamless user experience across SASE components.Provide architecture guidance and oversight to system integrators and delivery partners.Document solutions and provide knowledge transfer to operational teams.Compliance & GovernanceEnsure architectures and policies align with industry frameworks (NIST, ISO 27001, PCI-DSS, GDPR).Support ongoing governance, risk, and compliance activities related to the SASE environment.*

Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation.

The SASE Solution Architect will play a key role in Air Canada’s cybersecurity program, responsible for designing and guiding the adoption of Secure Access Service Edge (SASE) capabilities across the enterprise. The role ensures secure, scalable, and resilient connectivity for branch offices, data centers, cloud workloads, and remote users. The Architect will define the technical standards, logical and physical designs, and security controls to support Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), SaaS Security Posture Management (SSPM), and Enterprise Browser solutions. This position will collaborate with internal teams and system integrators to deliver a future-state security architecture aligned to Air Canada’s strategy and compliance requirements.

Responsibilities\:

The SASE Solution Architect will undertake tasks as assigned by management. While the following outline key responsibilities, they may evolve with program needs\:

Architecture & DesignDefine enterprise SASE architecture, covering SD-WAN, ZTNA, SWG, CASB, SSPM, and related components.Assist in developing detailed physical and logical designs for LAN, WAN, Wi-Fi, routing, segmentation, and security policy enforcement.Align architecture with Zero Trust principles and Air Canada’s identity/security ecosystem (AD, SSO, MFA).Assist in the data gathering and persona definition for SASE use cases.Define and establish measurement capabilities for KPIs including policy enforcement success rate, latency impact, and threat detection coverage.Resiliency & MonitoringDesign and validate failover, disaster recovery, and resiliency scenarios.Ensure integration with other security tools like SIEM (Microsoft Sentinel) for monitoring, alerting, and reporting.Assist with the creation of automated and manual incident response playbooks for SASE use cases.Maximize the value of the SASE platform including AI-driven threat detection and response.Policy & Security ControlsMap current NGFW, segmentation, and policy models into the SASE/SD-WAN environment.Define and test DLP, URL filtering, threat protection, and data security policies across managed/unmanaged devices.Stakeholder EngagementCollaborate with network, security, cloud, enterprise architecture, and IT operations teams to ensure architecture meets SLA/SLO requirements.Collaborate with UX and endpoint teams to ensure a seamless user experience across SASE components.Provide architecture guidance and oversight to system integrators and delivery partners.Document solutions and provide knowledge transfer to operational teams.Compliance & GovernanceEnsure architectures and policies align with industry frameworks (NIST, ISO 27001, PCI-DSS, GDPR).Support ongoing governance, risk, and compliance activities related to the SASE environment.*

Education\:

Bachelor's Degree in Computer Science, Information Security, Engineering, or related discipline.

Work Experience Qualifications\:

8 years of experience in enterprise network or security architecture roles.Proven experience designing or deploying SASE platforms (e.g., Palo Alto, Zscaler, Netskope, Cisco).Strong knowledge of SD-WAN, NGFW, ZTNA, NAC, DLP, SWG, CASB, SSPM, and cloud security integration.Experience working in large, regulated enterprises; airline/aviation sector experience an asset.Excellent documentation, communication, and stakeholder engagement skills.

Certifications (Preferred)\:

CISSP, CCSP, CCNP Security, or equivalent.

Other Qualifications\:

Strong analytical and problem-solving skills with ability to design practical solutions.Commitment to continuous learning and staying current with cybersecurity and SASE trends.Demonstrate punctuality and dependability to support overall team success in a fast-paced environment.

Conditions of Employment\:

Candidates must be eligible to work in the country of interest, at the time any offer of employment is made and seeking any required work permits/visas or other authorizations which may be required is the sole responsibility of the candidates applying for this position.

Linguistic Requirements

Based on equal qualifications, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is strongly committed to Diversity and Inclusion and aims to create a healthy, accessible and rewarding work environment which highlights employees’ unique contributions to our company’s success.

As an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.

Air Canada thanks all candidates for their interest; however only those selected to continue in the process will be contacted.

*

Education\:

Bachelor's Degree in Computer Science, Information Security, Engineering, or related discipline.

Work Experience Qualifications\:

8 years of experience in enterprise network or security architecture roles.Proven experience designing or deploying SASE platforms (e.g., Palo Alto, Zscaler, Netskope, Cisco).Strong knowledge of SD-WAN, NGFW, ZTNA, NAC, DLP, SWG, CASB, SSPM, and cloud security integration.Experience working in large, regulated enterprises; airline/aviation sector experience an asset.Excellent documentation, communication, and stakeholder engagement skills.

Certifications (Preferred)\:

CISSP, CCSP, CCNP Security, or equivalent.

Other Qualifications\:

Strong analytical and problem-solving skills with ability to design practical solutions.Commitment to continuous learning and staying current with cybersecurity and SASE trends.Demonstrate punctuality and dependability to support overall team success in a fast-paced environment.

Conditions of Employment\:

Candidates must be eligible to work in the country of interest, at the time any offer of employment is made and seeking any required work permits/visas or other authorizations which may be required is the sole responsibility of the candidates applying for this position.

Linguistic Requirements

Based on equal qualifications, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is strongly committed to Diversity and Inclusion and aims to create a healthy, accessible and rewarding work environment which highlights employees’ unique contributions to our company’s success.

As an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.

Air Canada thanks all candidates for their interest; however only those selected to continue in the process will be contacted.