Architecte Sécurité Données - IA Générative et Agentique in Québec

Location: Quebec City, Canada

In fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.

Within the group, Thales Digital Solutions (TDS) is a technological innovation hub supporting all sectors of activity, both in the local Canadian market and internationally. Join us to contribute to the development of mission critical solutions. Our various cutting-edge projects use our expertise in Artificial Intelligence, Human Factors, Collaborative Autonomous Systems, Optimization, Knowledge Management, Cybersecurity and Design.

Our team conducts research and development (R&D) to meet the needs of the Department of National Defence (DND) and the Canadian Armed Forces (CAF). The projects focus on innovative digital solutions combining software development, systems integration, modern infrastructure, and generative artificial intelligence.

As part of accelerating our artificial intelligence initiatives, we aim to develop a new generation of applications based on Agentic AI. These solutions go beyond traditional conversational assistants by enabling intelligent agents to analyze data, reason, make decisions, orchestrate complex workflows, and interact with multiple enterprise systems autonomously and securely.

We are looking for a Data Security Architect - Generative AI and Agentic AI to join our team in Quebec City, specializing in knowledge management. Our multidisciplinary team focuses on collecting, transforming, and enriching data. Our projects involve defining and deploying automated processing chains to make data accessible to users. With the support of our data scientists, the team designs, trains, and integrates artificial intelligence models, including generative AI (GenAI) based on large language models (LLM), to enhance data analysis. Our team also uses AI and machine learning (ML) concepts to increase the efficiency of analyses.

Essential Functions:

• The Data Security Architect is responsible for defining, implementing, and governing the data security architecture and operations for next-generation data fusion and artificial intelligence solutions in the context of a C2IS (Command and Control Information System).
• In collaboration with data, AI, cybersecurity, and development teams, this person will ensure the application of Data Centric Security (DCS) principles, securing Generative AI and Agentic AI platforms, as well as establishing robust compliance, auditability, and traceability mechanisms.
• This role will also contribute to the evolution of DevSecOps, MLOps, and LLMOps practices on Google Cloud to ensure the secure, reliable, and operational deployment of critical AI capabilities in defence and national security environments.
• The Data Security Architect will play a key role in designing, developing, and deploying intelligent platforms and applications integrating language models (LLM), multi-agent architectures, Retrieval-Augmented Generation (RAG) engines, orchestration tools, and next-generation cloud services.
• This person will contribute to strategic projects aimed at improving operational efficiency, decision support, and automating complex processes in environments where security, reliability, and traceability are essential.
• This individual must be autonomous, curious, and comfortable in a rapidly evolving R&D context.
• They will work with architects, developers, and AI specialists to transform technical concepts into concrete, demonstrable, and scalable solutions.
• This person is part of a multidisciplinary team. A strong team spirit and teamwork skills are mandatory.
• The ideal candidate should demonstrate cross-functional skills that facilitate the transfer of work done to all stakeholders involved. Therefore, good communication skills are required.

Responsibilities:

• Define the data security architecture and operations for data fusion platforms, Generative AI, and Agentic AI.
• Design and enforce Data Centric Security (DCS), Zero Trust, and Security by Design principles throughout the data lifecycle.
• Ensure compliance policies are applied during the ingestion, analysis, fusion, and sharing of multi-source data.
• Design governance, traceability, provenance, auditability, and data lineage mechanisms for data, models, and AI agents.
• Define security architectures for LLM solutions, RAG, multi-agent systems, and generative AI platforms.
• Establish security controls and safeguards for the safe and explainable use of AI agents in critical environments.
• Lead risk management, threat assessment, and compliance activities for AI/ML and cloud solutions.
• Design and oversee DevSecOps, MLOps, and LLMOps practices ensuring secure and reproducible deployments.
• Collaborate with product, data, AI, cybersecurity, and operations teams to integrate security requirements from the design phase.
• Support validation, certification, accreditation, and operational demonstration activities with internal and external stakeholders.

Minimum Requirements:

• Bachelor's degree in computer science, software engineering, information systems, data science, or a related field.
• More than 5 years of experience related to security, cybersecurity, data governance, or critical platforms.
• Demonstrated experience in highly regulated environments such as defence, aerospace, national security, or C2/C4ISR systems.
• Expertise in Data Centric Security (DCS), attribute-based access control (ABAC), role-based access control (RBAC), Zero Trust architectures, and governance of sensitive data.
• Applied experience in enterprise implementation and maintenance of data security policies on cloud or private platforms.
• Experience in developing and managing enterprise data flows involving various sources, databases, and/or data lakes, services, and systems.
• Mastery of DevOps, DevSecOps, MLOps, and LLMOps practices, including deployment automation and model governance.
• Expertise in Kubernetes, containers, GitOps, CI/CD, observability, and Infrastructure as Code (Terraform).
• Experience in designing solutions ensuring traceability, auditability, compliance, and lifecycle tracking of data and models.
• Excellent technical leadership, communication, and collaboration skills with multidisciplinary teams and industry partners.
• Intellectual curiosity and a strong interest in emerging technologies.
• Pragmatic, able to balance innovation, technical feasibility, and business value.
• Fluency in French and English (spoken and written).

Desired Qualifications:

• Experience with the development or integration of autonomous multi-agent systems in operational environments.
• In-depth knowledge of STANAG and ACP standards related to the subject.
• Experience involving AI, the use of LLM or AI Agents, or leveraging open-source models in secure environments.
• Mastery of risks and security controls related to AI (Prompt Injection, Data Poisoning, Model Leakage, Agent Security, AI Governance).
• Knowledge of AI governance frameworks and cybersecurity standards.
• Experience in developing and managing complex data flows involving transformation and aggregation of structured and unstructured data, using both traditional methods and AI/ML.
• Experience in accreditation, certification, or validation of critical systems, including producing audit, compliance, and security evidence for government or military clients.
• Recognized certifications such as CISSP, TOGAF, CISM, CCSP, Google Professional Cloud Architect, Google Professional Cloud Security Engineer, or Certified AI Governance Professional (AIGP).
• Knowledge of the defence domain, military intelligence, or the context of the Canadian Armed Forces.

Physical Requirements:

This position may require the employee to set up equipment and conduct field experiments in an outdoor environment.

This position requires direct or indirect access to hardware, software, or technical information controlled under the Canadian Export Control List, the Canadian Controlled Goods Program, the Canadian Industrial Security Program, the US International Traffic in Arms Regulations (ITAR), or the US Export Administration Regulations (EAR). All candidates must be eligible or able to obtain authorization for such access, including eligibility for the Canadian Controlled Goods Program and able to obtain a Canadian NATO Secret clearance.

Thales offers a comprehensive benefits program to all full-time employees working 24 hours or more per week and their eligible dependents, including:

• Company-paid extended health care, dental care, a health spending account, life insurance, accidental death and dismemberment insurance, short-term disability insurance, travel insurance, an employee assistance program, and a wellness program.
• Retirement savings plans (RRSP, DCPP, TFSA) with company contribution and matching to a DCPP, with no vesting period.
• Company-paid holidays, vacation days, and paid sick leave.
• Employee discounts on home and auto insurance.

Thales is an equal opportunity employer that values diversity and inclusion in the workplace. Thales is committed to providing accommodations throughout the recruitment process. Selected candidates for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview; our team will gladly work with each candidate to meet their specific needs. All information regarding accommodations will be treated confidentially and used solely for the purpose of providing an accessible candidate experience.