Network & Security Architecture
Location - Mississauga
Full-time
Job Description
Role Purpose
The Network & Security Architect is responsible for designing, governing, and assuring secure, scalable, and resilient network and security architectures across on-premises, cloud, hybrid, and edge environments. This role acts as the design authority and trusted advisor, ensuring solutions align with business objectives, regulatory requirements, and operational standards.
Key Responsibilities
Network & Security Architecture
Design end-to-end network and security solutions across LAN, WAN, WLAN, SD-WAN, data centers, cloud, internet edge, DMZ, and remote access environments.
Develop secure architecture patterns including network segmentation, Zero Trust, secure inter-zone communication, high availability, redundancy, and failover.
Create architecture diagrams, reference architectures, and detailed design documentation.
Security Technology Architecture
Architect and standardize enterprise security technologies including NGFWs, IDS/IPS, VPNs, NAC, Secure Web Gateways, and DDoS protection.
Evaluate and integrate new security technologies.
Ensure security controls are layered, auditable, and aligned to enterprise standards.
Governance & Standards
Define and maintain network and security architecture standards, design principles, and approved technology stacks.
Review designs from application, cloud, and SI/MSP teams.
Ensure compliance with security policies, regulatory requirements, and risk frameworks.
Risk Management & Threat Modeling
Conduct architecture-level risk assessments for new services, cloud migrations, and partner integrations.
Lead threat modeling and defense-in-depth reviews.
Ensure security risks are mitigated through design and architecture decisions.
Cloud & Zero Trust Architecture
Design secure networking solutions across AWS, Azure, and GCP.
Define hybrid connectivity, SaaS access, and Zero Trust networking models.
Integrate cloud solutions with enterprise security controls and identity-aware access patterns.
Managed Services & Solution Assurance
Act as the client-side design authority for SI/MSP-managed environments.
Review and approve solution designs and implementations.
Ensure operational readiness, SLA compliance, and prevention of non-standard technology deployments.
Resilience & Incident Support
Provide architectural guidance during major incidents, security events, and root cause investigations.
Design resilient solutions supporting rapid recovery, fault isolation, and reduced impact during outages.
Required Skills & Experience
Technical Skills
Strong expertise in enterprise networking, routing, switching, segmentation, and network security architectures.
Experience with Firewalls, IDS/IPS, VPNs, Zero Trust, and identity-aware networking.
Hands-on experience with hybrid cloud and multi-cloud networking (AWS, Azure, GCP).
Strong architecture documentation, modeling, and design governance experience.
Soft Skills
Excellent stakeholder management and communication skills.
Ability to translate technical risks into business recommendations.
Strong design governance and vendor management capabilities.
Ability to challenge and influence vendors, MSPs, and System Integrators.
Qualifications
Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.
Preferred certifications: CCNP, CCIE, CISSP, CISM, or relevant Cloud Security certifications.
