System Architect - Krembil Centre for Neuroinformatics at CAMH | CA | Rezi

System Architect - Krembil Centre for Neuroinformatics at CAMH

System Architect - Krembil Centre for Neuroinformatics

CAMH · CA

1 weeks ago

System Architect - Krembil Centre for Neuroinformatics

CAMH · CA

12 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this System Architect - Krembil Centre for Neuroinformatics role.

Rezi rewrites your resume against CAMH's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the System Architect - Krembil Centre for Neuroinformatics posting at CAMH — free, in seconds.

About the Role

The Solution Architect will lead the cloud and solution architecture for the Integrated Youth Services (IYS) data platform, built on Google Cloud Platform (GCP). This role involves owning the end-to-end design, integrity, and evolution of the GCP environment and its integration with broader infrastructure, ensuring scalability, security, and partner data sovereignty.

Responsibilities

  • Lead the design and evolution of the IYS platform's cloud and solution architecture on GCP, aligning it with research and program objectives and requirements for scalability, security, and partner data sovereignty; produce architectural diagrams, decision records, and specifications to communicate the design to stakeholders and partners.
  • Own the GCP organization and landing-zone architecture — the multi-tenant folder-per-partner model, non-production/production isolation, organization policies, and the resource hierarchy — enabling governance inheritance and clear separation of responsibilities across IYS networks, the collaboration layer, and shared infrastructure.
  • Define the platform's networking, security, and identity architecture, including hybrid connectivity to on-premises/partner environments (e.g., HA-VPN, dynamic routing, private connectivity), VPC design, security perimeters, and centralized logging and monitoring integrated with CAMH security tooling.
  • Design and maintain Entra ID-to-GCP identity federation — single sign-on, SCIM group provisioning, and workload identity — so access is centrally managed and consistent across cloud and enterprise environments.
  • Partner with the Data Architect so the technology architecture cleanly supports the data models, governance, and semantic layers, maintaining a clear, documented boundary between solution and data architecture.
  • Lead the architecture of the container and AI-serving substrate (e.g., GKE, infrastructure-as-code, vendor-neutral interfaces), upholding portability and open-standards principles to avoid vendor lock-in.
  • Define system components, interfaces, and dependencies for performance, security, reliability, and scalability; conduct architectural reviews, benchmarking, and capacity and resilience planning.
  • Define integration and interoperability strategies for connecting platform components with third-party services, APIs, partner systems, and CAMH's on-premises and Azure-based services.
  • Architect the integration between the IYS platform and CAMH's expanding on-premises footprint tied to the relocation, ensuring clean interoperability across on-premises and cloud boundaries to enterprise infrastructure and security standards.
  • Evaluate technologies, frameworks, and platforms, and review new and existing cloud designs for best-practice alignment and compliance with CAMH IT and security standards.
  • Lead and co-lead stakeholder engagement across IYS network partners, CAMH IT and IMG teams, developers, project managers, and vendors, building and maintaining strong working relationships through a collaborative approach to ensure seamless solution delivery.
  • Define standards and guardrails for infrastructure-as-code, DevOps pipelines, and the SDLC so deployments are consistent, repeatable, and auditable across partners.
  • Ensure the architecture meets the privacy, security, and compliance requirements appropriate to sensitive health data in a multi-partner research environment.
  • Other duties as assigned.

Requirements

  • Bachelor's degree (or equivalent) preferably in a computer-related field
  • 5+ years of senior-level experience in solution, cloud, or systems architecture for medium/large enterprise or data platforms
  • Demonstrated expertise architecting on Google Cloud Platform (e.g., organization and landing-zone design, IAM, BigQuery, GKE, networking, security perimeters)
  • Experience designing hybrid architectures that integrate cloud platforms with on-premises infrastructure, including hybrid connectivity, routing, DNS, and private connectivity
  • Experience with Microsoft Azure and Entra ID, including identity federation, single sign-on, and SCIM provisioning
  • Strong understanding of infrastructure-as-code (e.g., Terraform), containerization and orchestration (e.g., Kubernetes/GKE), and CI/CD and DevOps practices
  • Solid understanding of networking and core protocols (e.g., TCP/IP, DNS, VPN, BGP) and of security architecture, logging, and monitoring
  • Strong verbal, presentation, and written communication skills, with an ability to express complex technical concepts in business terms
  • Superior interpersonal skills and the ability to work well on cross-functional project teams, understand stakeholder needs, and foster productive working relationships
  • Experience architecting multi-tenant or federated platforms with strong tenant isolation and data-sovereignty controls (e.g., VPC Service Controls or equivalent perimeter security)
  • Working knowledge of Canadian health-data privacy and compliance (e.g., PHIPA, PIPEDA), data-residency requirements, and handling of PHI, ideally within a hospital, research institute, or other regulated environment
  • Depth in cloud security architecture — security perimeters, KMS/secrets management, and SIEM/security operations (e.g., Google Security Command Center, Microsoft Sentinel); GCP Professional Cloud Security Engineer or CISSP an asset
  • GCP Professional Cloud Architect, Azure, or related cloud certifications
  • Experience architecting AI/ML or GPU-based workloads (e.g., containerized model serving, MLOps), relevant to the platform's GKE-based AI-serving layer
  • Cloud cost management / FinOps experience, including optimizing GPU and compute spend across many projects or tenants
  • Familiarity with a modern data and analytics stack (e.g., BigQuery, Looker, dbt, a metadata/catalog tool) sufficient to collaborate effectively with the Data Architect
  • Experience with data and data systems used in the mental health and addictions sector, or a comparable health, research, or regulated data environment
  • Awareness of Indigenous data sovereignty principles (e.g., OCAP, CARE) as they apply to pan-Canadian, multi-partner data governance
  • Experience delivering across distributed or federated partner organizations, or in a public-sector, academic, or non-profit consortium context
  • Bilingualism (French/English) and/or proficiency in another language

Skills

  • Google Cloud Platform (GCP)
  • GCP organization and landing-zone design
  • IAM
  • BigQuery
  • GKE
  • GCP networking
  • GCP security perimeters
  • Hybrid cloud architecture
  • On-premises infrastructure integration
  • Hybrid connectivity
  • Routing
  • DNS
  • Private connectivity
  • Microsoft Azure
  • Entra ID
  • Identity federation
  • Single sign-on
  • SCIM provisioning
  • Infrastructure-as-code (Terraform)
  • Containerization (Kubernetes/GKE)
  • Orchestration
  • CI/CD
  • DevOps practices
  • Networking
  • Core protocols (TCP/IP, DNS, VPN, BGP)
  • Security architecture
  • Logging
  • Monitoring
  • Verbal communication
  • Presentation skills
  • Written communication
  • Interpersonal skills
  • Cross-functional team collaboration
  • Stakeholder needs assessment
  • Multi-tenant platform architecture
  • Federated platform architecture
  • Tenant isolation
  • Data sovereignty controls
  • VPC Service Controls
  • Canadian health-data privacy and compliance (PHIPA, PIPEDA)
  • Data residency requirements
  • Handling of PHI
  • Cloud security architecture
  • KMS/secrets management
  • SIEM/security operations
  • Google Security Command Center
  • Microsoft Sentinel
  • GCP Professional Cloud Security Engineer
  • CISSP
  • GCP Professional Cloud Architect
  • Azure certifications
  • AI/ML workload architecture
  • GPU-based workload architecture
  • Containerized model serving
  • MLOps
  • Cloud cost management
  • FinOps
  • Modern data and analytics stack (BigQuery, Looker, dbt, metadata/catalog tool)
  • Mental health and addictions data systems
  • Indigenous data sovereignty principles (OCAP, CARE)
  • Distributed partner organization delivery
  • Public-sector consortium context
  • Academic consortium context
  • Non-profit consortium context
  • Bilingualism (French/English)

Location

  • Canada

Work Type

  • Full-time
  • Contract (12 months)

Experience Level

  • Senior-level

Education Level

  • Bachelor's degree (or equivalent) preferably in a computer-related field

Salary/Compensations

  • $49.21 – $66.61 per hour

About the Company

  • The Integrated Youth Services (IYS) data platform is a federated, bilingual, pan-Canadian learning health system that brings together integrated youth services networks and hubs across the country to transform mental health and substance use care for young people.
  • Delivered through the Krembil Centre for Neuroinformatics (KCNI) at CAMH, the initiative emphasizes open, reproducible, data-driven research, strong data governance, and global collaboration.
  • CAMH is a fully affiliated teaching hospital and research institute of the University of Toronto.
  • CAMH is dedicated to equity, diversity, and inclusion. Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment.
  • CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges.
  • We welcome applicants from all backgrounds.
  • Through its core values of Courage, Respect and Excellence, CAMH is implementing its Strategic Plan: Connected CAMH, to transform lives, ignite innovation and discovery, revolutionize education and drive social change.
  • CAMH is more than a hospital, it is a cause. CAMH is on a mission to change the way society thinks about and responds to mental illness. They aim to eliminate prejudice and discrimination and shape a world where mental illness is central to our healthcare system – a world where Mental Health is Health.
  • To learn more about CAMH, please visit their website at: www.camh.ca.
  • To view our Land Acknowledgment, please click here.

Equal Opportunity

  • CAMH is dedicated to equity, diversity, and inclusion. Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment.
  • CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges.
  • We welcome applicants from all backgrounds.
  • Thank you to all who apply; however, only those selected for an interview will be contacted.
  • If you require accommodations during the application or recruitment process, please let us know.