Solution Architect (Temporary Fixed Term Full Time Opportunity until 31/12/2027)

Transport for NSW; Sydney; Hybrid; AUD 163,000 - 183,000; Full time

Benefits offered by this job

Health insurance

Job summary

Transport for NSW is seeking a Solution Architect for a fixed-term full-time role based at Redfern with a hybrid work model. You will own the end-to-end design and rollout of secure, high-performance network architectures across AWS, Azure, on-prem and partner environments.

The role requires expert knowledge of cloud networking, network security, and hybrid connectivity, with experience in VPN, Direct Connect, ExpressRoute, and practical security controls such as Zero Trust and SASE.

Qualifications

• Experience designing secure, scalable hybrid networks across cloud and on-prem.
• Proficient in cloud networking patterns (hub-spoke, transit, shared services).
• Ability to produce High-Level and Low-Level Design documents.

Responsibilities

• Own end-to-end design and rollout of network architectures.
• Architect solutions aligned with enterprise standards.
• Collaborate with security, application, and infra teams.

Skills

Hybrid cloud

AWS

Azure

Network security

Zero Trust

SASE

DNS

BGP

OSPF

VPC

Education

Tertiary qualification

Tools

Akamai

Zscaler

Palo Alto

GlobalProtect

Telstra Cloud Gateway

Megaport

Equinix

Job description

Solution Architect (Temporary Fixed Term Full Time Opportunity until 31/12/2027)

Solution Architect (Temporary Fixed Term Full Time Opportunity until 31/12/2027)

Organisation/Entity:Transport For NSW

Job category:Projects

Job location:

South Eveleigh, NSW, AU, 2015

Job reference number:111924

Employment type:Fixed Term Full-Time

Salary range:$163145.0-$182721.0

You crave a career that pushes you, where you'll meet challenges head on and you're guaranteed to grow.

Your innovative mindset is key to creating solutions to complex problems. Our systems drive our organisational success and underpin every journey our customers take. This is your opportunity to be part of an expert team who build and refine seamless technology experiences.

In this role, you'll:

Own the end-to-end design, and rollout of secure, high-performance network architectures across AWS , Azure, on-prem and partner Operational Technology environments. You’ll be responsible for architecting solutions aligned with enterprise architecture standards to support business systems and services.

Join our collaborative Operational Technology team—an environment that values growth, development, and your contribution to high-quality, secure service delivery.

This is a fixed-term full-time role until 31/12/2027, based at our Redfern office with a hybrid work model.

For more information on this position and business unit, view the role description and information pack.

About you

• Strong background in enterprise network engineering and solution architecture, particularly in hybrid cloud environments (AWS or Azure, on-premises, and partner networks).
• Expert knowledge of AWS or Azure network architecture, including:
  -AWS: VPC, Transit Gateway, PrivateLink, VPN, Direct Connect, Route 53; or
  -Azure: Virtual Network (VNet), Virtual WAN, Private Link, VPN Gateway, ExpressRoute, Azure DNS
  -Designing secure and scalable hybrid connectivity solutions across cloud, on-premises, and partner networks.
• Experience in hybrid network design, including:
  -Integration with third-party gateways and connectivity providers (e.g. Telstra Cloud Gateway, Megaport, Equinix).
  -Site-to-site IPSec VPNs, DMVPN, SD-WAN, and secure routing between cloud and on-premises environments.
• Deep understanding of network security architectures, including:
  -Palo Alto firewalls (perimeter security, traffic inspection, segmentation, and threat prevention).
  -GlobalProtect VPN or equivalent secure remote access solutions.
  -Zero Trust, SASE, and cloud security architectures.
• Familiarity with technologies used in secure hybrid environments, including:
  -Akamai (CDN, WAF, Edge Security, DDoS protection).
  -Zscaler (SASE and Zero Trust Access).
• Proficient in:
  -Routing protocols (BGP, OSPF), network segmentation, subnetting, firewall policy design, and telemetry.
  -DNS, load balancing, traffic management, and network monitoring.
  -High availability, resilience, and disaster recovery networking principles.
• Strong understanding of cloud and enterprise networking patterns, including:
  -Hub-and-spoke, transit, and shared-services architectures.
  -Hybrid and multi-region connectivity designs.
  -Secure integration between cloud and enterprise environments.
• Skilled in producing clear network architecture documentation, including:
  -High-Level Designs (HLDs) and Low-Level Designs (LLDs).
  -Security models and trust boundaries.
  -Routing diagrams, connectivity designs, and integration specifications.
• Strong communication and stakeholder engagement skills, with the ability to translate complex technical concepts into business outcomes and architectural recommendations.
• Able to work collaboratively with security, application, platform, infrastructure, and vendor teams within large enterprise environments.
• Appropriate tertiary qualifications or demonstrated equivalent professional experience.
• Nice to Have:
  -Experience with radio communications networks, telephony/VoIP platforms, and network connectivity solutions supporting operational technology (OT), field communications, IoT, or other critical infrastructure environments.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.

Applications close 11:59 PM Wednesday 21 October, 2026.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

#LI-Hybrid

Job Segment: Solution Architect, Architecture, Developer, Network Engineer, Network Security, Technology, Engineering, Security