Product Specialist, DSPM

About F12: F12 was built by uniting IT consulting firms across Canada with a shared vision: to reduce risk and complexity by crafting technology platforms that empower leaders to focus and thrive. We elevate IT conversations from ingredients to outcomes, delivering fully designed solutions with no bad options. If you’re looking for the fast lane into an IT career or want to supercharge your professional development, you’ve come to the right place. At F12, you’ll collaborate with a diverse team and gain exposure to technology services across countless businesses—building a resume rich with experience and accomplishments. Our mission is to elevate our employees by building and retaining an elite team of IT professionals equipped to deliver unmatched service to Canadian business leaders. We value humble service, continuous improvement, and hard work—and we’re looking for like-minded individuals to join us.    The Position: We are seeking a highly skilled Senior Cloud, AI, and Security Architect to lead the design, implementation, and governance of secure, scalable, multi‑cloud environments across Azure and AWS. This role blends deep cloud engineering expertise with advanced security and enterprise networking capabilities. You will partner with the Sr Cloud Solution Architect, Cybersecurity, Data, and AI teams to deliver secure-by-design architecture, modern automation, and resilient platforms that support enterprise-scale applications.   This position is ideal for a senior technologist who thrives in complex environments, influences cross‑functional teams, and elevates engineering standards across cloud, AI, data, and network domains.     Multi‑Cloud Architecture & Engineering   * Design, build, and maintain Azure and AWS infrastructure using compute, networking, storage, serverless, and PaaS services.   * Architect multi‑cloud solutions that meet enterprise requirements for scalability, security, governance, and cost efficiency.   * Maintain reusable cloud patterns, landing zones, and reference architectures.   * Support containerized workloads across AKS, EKS, ECS, Fargate, App Services, and Lambda.   * Data Warehouse Migration to Azure and AWS   * Infra and Database Migration to Azure and AWS   * Microsoft Azure VMware Solution   * Optimize workloads for performance, resilience, and cost (FinOps mindset).   * Ensure operational readiness, backups, and disaster recovery across both clouds.   Infrastructure as Code (IaC) & Automation   * Troubleshoot and maintain IaC using CDK, CDKTF, Terraform, and Bicep.   * Develop reusable IaC modules, wrappers, and libraries for consistency and compliance.   * Enhance automation pipelines for provisioning, configuration management, and policy enforcement.   CI/CD & Modern Application Delivery   * Maintain CI/CD pipelines using Azure DevOps, GitHub Actions, and AWS Code Pipeline.   * Integrate security scanning, compliance checks, and artifact management into release workflows.   * Enable cloud-native development patterns and modern application hosting.   Cloud Security   * Assess, design, implement, and automate security controls across Azure and AWS.   * Develop and maintain cloud security patterns, baselines, and policies-as-code.   * Review and approve changes with security implications (IAM roles, policies, SGs, etc.).   * Serve as the cloud security SME for IaaS, PaaS, and SaaS implementations.   * Ensure alignment with regulatory frameworks (CSA CCM, ISO 27001/27017, NIST CSF).   Data Security   * Implement and manage DSPM tools to monitor sensitive data exposure.   * Establish controls for structured/unstructured data across Snowflake, S3, ADLS, data lakes, and warehouses.   * Drive adoption of data-centric security practices.   * Implement DLP, data classification, encryption, tokenization, and key management.   Network Infrastructure & Cloud Networking   * Configure, and troubleshoot routers, switches, firewalls, wireless access points, and cloud networks.   * Design and support Azure networking (VNet, NSG, routing, hybrid connectivity).   * Lead upgrades, migrations, and integration projects.   * Monitor network performance, availability, and reliability.   * Implement network security measures in coordination with Cybersecurity teams.   Operations, Monitoring & Optimization   * Implement end-to-end monitoring, logging, and alerting using Azure Monitor, Log Analytics, CloudWatch, and equivalent tools.   * Ensure strong observability through metrics, logs, traces, dashboards, and runbooks.   * Manage patching, upgrades, and lifecycle governance for cloud and container workloads.   Security Compliance & Governance   * Lead cybersecurity risk assessments for cloud, AI/ML, and data platforms.   * Provide pragmatic security guidance to enable innovation while managing risk.   * Support investigations and remediation of security incidents, including AI model compromise or data breaches.   * Collaborate with Information Security, Product, and Engineering teams to assess and mitigate risk.   * Information Protection and Governance   * Identity and Access Management     Required Qualifications   * 7–10+ years of experience in cloud engineering, security architecture, or related domains.   * Hands-on experience with Azure and AWS in production environments.   * Hands-on experience with Fortinet and Paolo Alto Firewalls    * Strong proficiency with IaC (Terraform, CDK, Bicep).   * Expertise in containers and orchestration (AKS, EKS, ECS, Fargate).   * Strong scripting skills (PowerShell, Python, Bash).   * Deep knowledge of cloud networking, identity, and security principles.   * Experience with CI/CD pipelines and automation frameworks.   * Strong understanding of TCP/IP, DNS, DHCP, VPN, VLANs, routing protocols.   * Experience with enterprise network infrastructure (routers, switches, firewalls, wireless).   * Familiarity with Ruckus One, Strata Cloud Manager, Palo Alto, and ServiceNow.     Preferred Qualifications   * Azure certifications: AZ‑104, AZ‑305, AZ‑400.   * AWS certifications: Solutions Architect Associate/Professional, DevOps Engineer, Security Specialty.   * Security certifications: CISSP, CCSP, CCSK.   * Experience in regulated industries (finance, banking, insurance).   * Knowledge of DSPM tools, DLP, and data governance frameworks.   * Familiarity with Snowflake, Databricks, Redshift, Synapse.     Core Competencies   * Strong analytical and problem-solving skills.   * Ability to work autonomously and drive cloud services end-to-end.   * Excellent communication and cross-team collaboration skills.   * Customer-focused mindset with a passion for enabling high-performing engineering teams.   * Ability to mentor junior team members and elevate engineering standards.   * Demonstrated ability to influence senior leadership and drive security-first decision-making.   * Passion for DevSecOps, MLSecOps, and staying ahead of emerging AI threats.     What You Can Expect from Us: We are proud of our forward-thinking, dynamic culture that champions diversity, inclusivity, and a respectful working environment. We also want to make sure that however you get IT done in all parts of your life, we’ve got your back. Our comprehensive total rewards program includes:     * Work-Life & Growth: Three weeks vacation plus extra Flex Days, leadership development opportunities, growth coaching, and reimbursements for educational advancement and certifications.   * Health & Financial Well-Being: Health Spending Account or RRSP matching, extended health care, dental and vision coverage, disability and life insurance, and an employee assistance program.   * Additional Perks: Tuition reimbursement, paid time off, on-site parking, high-class office amenities, and company events.    Our Equal Opportunity Commitment:  * F12.net practices as an equal opportunity employer in all services locations. We are committed to building and maintaining a workforce diverse in experience, skills and knowledge. The company maintains a strict policy to ensure equal employment opportunities and do not discriminate based on any grounds and elements protected by law. For those requiring assistance with disabilities, information relating to accommodation and accommodation measures will be addressed confidentially. Please notify us in advance if any accommodation needs are required.    The above statements are intended to describe the general nature and level of work performed by people assigned to this job classification. They are not intended to be an exhaustive list of all responsibilities and duties required of people assigned to this job classification.

Job Description: Sr. Purview Architect We a have terrific new permanent employment opportunities for a Senior Purview Architect here at F12. We are seeking this role to support multiple Enterprise Purview Information Protection projects, including significant deployments for organizations in the energy, finance and health care sectors. This role involves deploying M365 and Purview Information Protection solutions, ensuring compliance with regulatory requirements, and providing expertise in data governance. F12 works with clients of all sizes, from mid-sized businesses to major public sector organizations. In these environments, you will be working across a wide array of projects, including (but not limited to) M365/Purview technical roadmap development, Information Protection solution design and implementation (Purview, SharePoint for example), and compliance initiatives focused on information protection and security hardening projects. Delivery across multiple streams often happens concurrently, with many technical dependencies to be considered. You will be supported through project delivery by a full project team, including other Solution Architects, Technical Architects, Project Managers, and Adoption Change Management specialists. Your performance will be measured through the successful implementation and deployment of Purview Information Protection projects.   The main areas of responsibility include:  Provide technical architectural guidance and hand-on build through the design, configuration, and implementation of M365 and Microsoft Purview Information Protection services and associated functionality: * Deploy M365 solutions across various projects. * Deploy Purview Information Protection solutions across various projects. * Engage in fast-paced project timelines and deliver high-quality results. * Collaborate with clients to understand their needs and design appropriate solutions. * Protect M365 content, including SharePoint, Teams, OneDrive, and Exchange. * Protect on-premises Network Drive content. * Provide expertise in data governance, compliance, and privacy policies. * Utilize DSPM for AI to enhance data protection strategies. * Ensure compliance with regulatory bodies and industry-specific requirements. * Mentor other team members on Information Protection best practices. * Contribute to the growth of AMTRA’s Information Protection business line.   Required Skills and Experience: * 5+ years of relevant Microsoft cloud project delivery across multiple complex customer environments (experience implementing comparable Information Protection products will be considered). * Extensive experience in deploying M365 solutions in Enterprise-level organizations. * Extensive experience in deploying Purview Information Protection solutions in Enterprise-level organizations, with hands-on experience implementing: * Identity configuration, including hybrid identity, conditional access policies, and role-based access control. * Sensitivity labels, label policies, and auto-labelling. * Custom sensitive information types utilizing regular expressions, keyword lists, keyword dictionaries, and document fingerprinting. * Data loss prevention (DLP) policies. * Insider risk management (IRM) policies. * Endpoint protection. * Strong understanding of regulatory requirements and compliance standards. * Proficiency in data governance and privacy policies. * Ability to work independently and as part of a team. * Excellent communication, discovery, and documentation skills.   The following are considered an asset * Hands-on experience implementing Defender for Cloud Apps, Exchange Online, Microsoft Intune, and other Microsoft cloud technologies.  * Strong problem-solving skills and attention to detail. * Microsoft certifications.