Zaelab

Design and govern scalable, secure, and high-performing digital commerce architectures, guide clients through platform selection, modernization, and technical problem-solving. | Extensive experience with commerce platform architecture, including SAP Hybris, Java, web services, and client-facing consulting experience. | The Software Solutions Architect, reporting to the VP of Technology Solutions, is responsible for designing and governing scalable, secure, and high-performing digital commerce architectures across a wide range of client engagements. With a strong emphasis on commercetools and other modern, API-first, headless commerce platforms, this role ensures the delivery of best-in-class technical solutions that align with client business goals. You will translate strategy into technical execution, define architectural blueprints, guide cross-functional teams, and serve as a trusted advisor to clients throughout their digital transformation journey. The Architect collaborates closely with client stakeholders, delivery teams, and technical leadership to shape solutions, drive project success, and ensure architectural integrity end-to-end. Your Key Responsibilities: Commerce Architecture & Solution Design: Define and maintain commerce platform system architecture including product data models, module and capability selection, integration patterns, and client-specific adaptations. Lead solution design for commercetools implementations and other modern commerce platforms (e.g., Shopify Plus, BigCommerce, Salesforce Commerce Cloud, Adobe Commerce). Develop architecture blueprints, technical roadmaps, and documentation to support scalable and modular solution delivery. Platform Evaluation & Technology Advisory: Evaluate and advise clients on commerce technology platforms, participating in platform selection processes and providing strategic recommendations aligned to business goals. Guide clients on composable, MACH, and headless strategies across the modern commerce landscape. Technical Leadership & Problem Solving: Work alongside client technical teams and Zaelab development teams to solve emerging platform or integration challenges. Ensure solutions are scalable, secure, resilient, and aligned with best practices. Act as a technical escalation point for architecture, integration, and performance-related issues. Pre-Sales Architecture & Discovery Support: Define solution architecture concepts and technical approaches during pre-sales efforts. Collaborate with sales teams, delivery leads, and client stakeholders to shape proposals and advise clients on platform, integration, and technology strategies. Conduct technical assessments, discovery workshops, and scoping engagements. Legacy System Modernization: Assess existing or legacy commerce platforms to identify technical debt, performance limitations, refactoring opportunities, and modernization pathways. Guide clients through phased modernization or replatforming strategies toward headless, API-driven architectures. Risk Management & Delivery Alignment: Partner with Project Managers and delivery leads to identify project technical risks, evaluate alternative solutions, and implement mitigation strategies. Ensure architectural decisions align with timelines, scope, and delivery constraints. Communication & Stakeholder Engagement: Effectively communicate architectural designs, technical constraints, design rationale, and implementation roadmaps to client teams and internal delivery teams. Serve as a trusted advisor, aligning technical decisions with business goals and helping stakeholders make informed tradeoffs. Your Experience & Skills 10+ years experience with overall Solution Architecture Bachelor’s degree in Computer Science or a related technical field Experience with other digital commerce platforms including Oracle ATG and Magento Experience with RDBMS Oracle/SQL Server/MySQL/MongoDB 5+ years' commercial experience with SAP Hybris defining solution architecture, product data models and integration solutions At least three years' experience in an IT consulting setting in a client-facing role Five+ years' experience in Java, JEE, Spring and other enterprise related technologies Strong verbal and written communication skills Experience working on large-distributed teams utilizing Git, SVN, Jenkins, Jira, etc. Experience with web services and data formats such as SOAP/Rest/GraphQL and JSON/XML Expertise utilizing SAP Hybris B2B and B2C accelerators Exposure to the latest technologies for modern web development including Node.js, Vue.js Experience with agile and hybrid iterative software development methodologies Comfort researching and adopting new emerging web technologies Unlimited Vacation/PTO Full Health Benefits and 401k Fixed Percentage Plan (USA only) RRSP (Canada) Fully remote and distributed teams Paid Parental Leave Ongoing training and education opportunities 0% Bureaucracy Culture - Focus is on responsibilities, not title Like what you see but don’t meet every requirement? Apply anyways! Studies have shown that various groups (women and people of colour) are less likely to apply to jobs unless they meet every requirement. At Zaelab, we’re committed to building and fostering an inclusive accessible environment, where all employees feel valued, respected and supported. We are dedicated to creating a culture with a diversity of talented individuals who join, stay, and work in an environment that enables them to thrive. Zaelab is proud to be an equal-opportunity employer. We are committed to providing accommodations. If you require accommodation, we will work with you to meet your needs. We use E-Verify to confirm the identity and employment eligibility of all new USA hires. Please rest assured that we’ll treat any information you share with us with the utmost care, only use your information for recruitment purposes and will never sell it to other companies for marketing purposes. Please review our privacy policy for future information LINK

As a Security Engineer, you will own end-to-end security across multiple cloud projects, embedding automated controls and best practices. You will partner with various teams and act as a client-facing security authority, briefing both technical staff and C-level executives. | The role requires 7+ years of hands-on security engineering experience in cloud-native environments and expert knowledge of AWS and Azure services. Proven experience with SIEM, vulnerability management tools, and a consultative mindset are essential. | As a Security Engineer, you will own end-to-end security across multiple enterprise and mid-market cloud projects. Your initial mission is to embed automated controls and best practices into every AWS- and Azure-based delivery, shifting the organisation from reactive fixes to a proactive security posture. Reporting directly to the Director of Engineering, Cloud, you will partner daily with Technology, Cloud, Engineering and Account-Management teams and act as a client-facing security authority - able to brief both technical staff and C-level executives. Your Responsibilities Design, implement and enforce comprehensive Secure SDLC processes, integrating automated security controls, threat modeling, secure coding standards, and continuous security testing throughout the entire development lifecycle. Develop, document and enforce security policies in our Confluence-based knowledge base and project DMS. Harden multi-account AWS and Azure estates (EC2, S3, IAM, VPC, CloudTrail, CloudFront; Virtual Machines, Storage Accounts, Key Vault, NSG, Policy, Monitor). Deploy and tune SIEM/log-management platforms (Splunk, ELK, Microsoft Sentinel); craft queries and dashboards that surface actionable threats. Run scheduled and continuous vulnerability scans (Qualys, Rapid7, Defender), interpret results and drive remediation with Engineering. Configure and manage security edge controls—firewalls, WAFs (Akamai, AWS/Azure WAF) and IDS/IPS—tailored to each client’s risk profile. Integrate SCA (Trivy, Grype, Snyk) and DAST (OWASP ZAP) tooling into build pipelines; champion secure-by-design coding practices. Lead security architecture reviews and threat-model sessions with cross-functional, multi-country delivery teams. Present findings, roadmaps and risk mitigation strategies directly to enterprise clients, translating technical issues into clear business impact. Continuously evaluate emerging threats, Zero-Trust patterns and supply-chain risks; recommend tooling and process improvements that keep us ahead of third-party scans. 7 + years of hands-on security engineering in cloud-native, agile environments. Expert knowledge of core AWS and Azure services and how to secure them at scale. Proven SIEM experience—log ingestion, correlation rule creation and dashboarding. Deep understanding of vulnerability management tools and remediation cycles. Practical experience with WAF/IDS/IPS configuration, network protocols (TCP/IP, DNS, HTTP) and Zero-Trust/IAM best practices (AD, Azure AD, Okta). Comfort operating as a solo security function: you set the standards, choose the tools (budget approved) and drive adoption company-wide. Consultative mindset with excellent written and verbal English; able to brief board-level stakeholders and guide client teams through complex security topics. Will be a plus Container and Kubernetes hardening, DevSecOps pipeline design, CNAPP familiarity, compliance frameworks (SOC 2, ISO 27001, PCI DSS) and industry certifications (CISSP, AWS Security Specialty, Azure Security Engineer Associate, CKS). Experience working with US clients Competitive compensation depending on experience and skills Unlimited, paid time off and vacation Budget for certifications and IT conferences Friendly team to work with around the world Be a team player in an agile software development environment focused on collaboration and continuous integration Comprehensive health insurance and retirement benefits: United States: Health Insurance and 401(k) plan. Canada: Health Insurance and Employer-Sponsored Retirement Plan.