Enterprise Architect, AI Engineering – Security & Compliance

At KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.

AI Engineering transforms emerging AI capabilities and business needs into secure, scalable, production-ready applications and platforms for KPMG Canada. The team works across application, data, platform and emerging AI technologies in close collaboration with ITS, Security, Risk, Legal, Global teams and business stakeholders.

As the Enterprise Architect for AI Engineering, you will provide architectural leadership across our technology portfolio, with particular emphasis on security, compliance, risk management and production readiness. You will manage high-level technical architecture, ensure alignment with KPMG enterprise standards, and help establish the controls, patterns and technology choices that enable secure delivery.

You will also serve as a key interface between AI Engineering and KPMG’s broader architecture, security and technology organizations, coordinating the reviews and approvals required to move solutions safely into production.

• Own the architecture of AI Engineering solutions, including high-level architecture and Technical Architecture Documents (TADs), ensuring alignment with enterprise architecture, cloud, data, security, and technology standards.
• Lead architecture, security, compliance, and production-readiness reviews, coordinating required controls, evidence, remediation activities, and enterprise approvals
• Govern vulnerabilities and security findings across applications, infrastructure, containers, dependencies, and cloud environments, driving remediation, mitigating controls, exceptions, and risk acceptance as required
• Establish and maintain reusable architecture patterns, security controls, and guardrails that support secure, consistent, and scalable engineering practices
• Govern development and SDLC tooling, including source control, CI/CD, infrastructure-as-code, security scanning, artifact management, and deployment tooling
• Partner with engineering, DevOps/SRE, platform, and product teams to embed secure-by-design practices across identity, networking, data protection, secrets management, logging, and monitoring
• Assess the architecture, security, and compliance implications of AI technologies, including models, agents, enterprise data integrations, AI platforms, third-party services, and content-safety controls
• Maintain oversight of architecture decisions, risks, controls, exceptions, and remediation commitments; support audits and assessments and translate evolving cloud, cybersecurity, AI security, and regulatory requirements into practical standards

• University degree in computer science, engineering, cybersecurity, information systems, or a related discipline.
• Significant experience in enterprise, solution, cloud, or security architecture within complex enterprise environments, including designing and reviewing production-grade cloud applications and platforms
• Strong knowledge of cloud and secure-by-design principles across identity and access management, networking, encryption, secrets management, logging, monitoring, and vulnerability management
• Experience with Microsoft Azure and cloud-native architecture, ideally including technologies such as Entra ID, Key Vault, Azure networking, Application Gateway/WAF, Azure Front Door, containers/Kubernetes, Azure Monitor, Defender for Cloud, and Sentinel
• Strong understanding of modern DevSecOps and secure SDLC practices, including GitHub, CI/CD, Terraform/infrastructure-as-code, SAST, software composition analysis, container scanning, artifact management, and automated deployments
• Strong understanding of security, compliance, and technology risk frameworks, including NIST-based controls and ISO standards, with experience supporting architecture, cybersecurity, risk, compliance, and audit reviews
• Experience assessing vulnerabilities and security risks, identifying mitigating controls, driving remediation, and supporting risk-acceptance or exception processes
• Familiarity with security and governance considerations for generative AI and agentic systems, including identity, enterprise data access, model/service integrations, and content safety
• Strong communication and collaboration skills, with the ability to translate complex technical and security topics into clear decisions, risks, and recommendations for technical teams and senior stakeholders

KPMG Ontario Region Pay Range Information

The expected base salary range for this position is $130,000 to $180,000 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.

Providing you with the support you need to be at your best

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

Adjustments and accommodations throughout the recruitment process

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.

AI Usage

We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.

We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.