Hybrid Cloud Solution Architect - Secure Network Design

Transport for NSW; Sydney; Hybrid; AUD 163,000 - 183,000; Full time

Job summary

Transport for NSW in Sydney is seeking a Solution Architect to own end-to-end design and rollout of secure, high-performance network architectures across AWS, Azure, on-prem, and partner networks. The role supports a hybrid work model from Redfern, with a fixed-term agreement through 31 December 2027.

You will lead enterprise network designs, champion Zero Trust and cloud security, and collaborate with security, application, platform, and OT teams to deliver resilient connectivity and compliant

Qualifications

• End-to-end design and rollout of secure, high-performance network architectures.
• Hybrid cloud experience across AWS, Azure, on-prem, and partner networks.
• Experience with VPNs, DMVPN, SD-WAN and secure routing.
• Knowledge of Zero Trust, SASE and cloud security architectures.
• Ability to produce High-Level and Low-Level designs (HLD/LLD).

Responsibilities

• Own the end-to-end design and rollout of secure network architectures across environments.
• Collaborate with OT, security, application, and vendor teams.
• Support hybrid connectivity and scalable, high-availability networks.
• Document architecture designs and security models clearly.

Skills

Hybrid cloud

Enterprise network design

AWS

Azure

Network security

Documentation

Stakeholder engagement

Education

Tertiary qualifications or equivalent experience

Tools

AWS

Azure

VPC

Transit Gateway

PrivateLink

ExpressRoute

VPN

DMVPN

SD-WAN

Palo Alto

GlobalProtect

Akamai

Zscaler

Job description

Transport for NSW in Sydney is seeking a Solution Architect to own end-to-end design and rollout of secure, high-performance network architectures across AWS, Azure, on-prem, and partner networks. The role supports a hybrid work model from Redfern, with a fixed-term agreement through 31 December 2027.

You will lead enterprise network designs, champion Zero Trust and cloud security, and collaborate with security, application, platform, and OT teams to deliver resilient connectivity and compliant