We are currently requesting resumes for the following position: ServiceNow - Architect
Resume Due Date: Thursday, June 18th, 2026 (5:00PM EST)
Number of Vacancies: 2
Level: MP5
Duration: 18 Months
Hours of work: 35 hours
Location: CHQ (Hybrid – 3 days remote)
Job Overview
- The ServiceNow Architect is responsible for the architecture, design, implementation, and continuous improvement of ServiceNow capabilities focused on Security Incident Response (SIR), Vulnerability Response (VR), and Integrated Risk Management (IRM).
- This role will provide technical and functional leadership to ensure scalable, secure, and sustainable solutions that align with enterprise governance, cybersecurity, risk, and compliance requirements.
- The successful candidate will work closely with Cybersecurity, Risk, Compliance, IT Operations, and delivery teams to define target-state architecture, guide implementations, and drive platform best practices across the ServiceNow ecosystem.
- Lead the end-to-end architecture, solution design, and implementation of ServiceNow SIR, VR, and IRM modules.
- Define scalable and supportable architecture patterns, data models, workflows, integrations, and governance controls for security and risk use cases.
- Collaborate with business stakeholders, cybersecurity teams, risk teams, compliance teams, and technical teams to translate requirements into solution designs.
- Provide architectural guidance for incident response workflows, vulnerability lifecycle processes, risk management frameworks, issue remediation, exceptions management, and policy/compliance processes.
- Establish and maintain platform design standards, guardrails, and best practices to ensure consistency, performance, scalability, and maintainability.
- Design and oversee integrations between ServiceNow and upstream/downstream tools such as security tools, vulnerability scanners, SIEM/SOAR platforms, CMDB, asset systems, and enterprise applications.
- Support roadmap planning and recommend improvements to mature security and risk processes enabled through ServiceNow.
- Ensure solutions align with enterprise architecture, data governance, security, audit, and operational support requirements.
- Provide technical leadership during implementation projects, enhancements, upgrades, and operational sustainment activities.
- Review and approve detailed solution designs, technical configurations, integration patterns, and data flows delivered by developers or implementation partners.
- Support testing strategy, deployment planning, release governance, and transition to operations.
- Drive continuous improvement by identifying opportunities to improve automation, reporting, user experience, process efficiency, and control effectiveness.
Architecture & Solution Design
- Develop target-state and transition-state architecture for ServiceNow SIR, VR, and IRM capabilities.
- Create solution designs for workflows, data models, forms, portals, dashboards, notifications, business rules, integrations, and role-based access.
- Define patterns for risk registers, issues, controls, policy exceptions, remediation tracking, and vulnerability response orchestration.
- Ensure appropriate use of CMDB, CI relationships, asset data, and service context to support security and risk use cases.
Process Design & Implementation
Design and optimize processes for:
- Security incident intake, triage, investigation, containment, and remediation
- Vulnerability identification, prioritization, assignment, remediation, and exception management
- Risk identification,
Qualifications
ServiceNow Platform & Architecture
- Minimum of 3 years of hands on experiences with SIR/VR/IRM , guiding and reviewing vendor implementations
- Strong understanding of ServiceNow platform architecture, data model, and application framework
- Experience designing scalable solutions across SIR (Security Incident Response), VR (Vulnerability Response), and IRM
- Ability to define end-to-end solution architecture (workflows, forms, integrations, reporting)
Security & Risk Domain Knowledge - Deep understanding of:
- Security incident lifecycle (triage → containment → resolution)
- Vulnerability management lifecycle (identify → prioritize → remediate → exception handling)
- Risk management concepts (risk register, controls, issues, policy/compliance)
- Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) is a strong asset
Process Design & Implementation - Experience designing and optimizing:
- Incident response workflows
- Vulnerability remediation processes
- Risk and compliance processes
- Strong alignment to ITIL and risk governance best practices
- Integration & Data Management
Hands-on experience with:
- REST APIs, web services, and integrations
- Data ingestion, normalization, and reconciliation
- Integrating with tools such as vulnerability scanners, SIEM/SOAR, CMDB, and asset systems
Pay: From $92.00 per hour
Work Location: Hybrid remote in Oshawa, ON
