Cloud Infrastructure Architect – Azure VWAN Migration Program

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; Hybrid; CAD 110,000 - 165,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Solution Architect to lead the Azure VWAN migration program in Calgary.

Hybrid work setup requires three onsite days per week, with responsibilities spanning architecture, governance, and cloud modernization. The role demands strong experience across application development, network and security disciplines, and the ability to bridge traditional IT with cloud-native solutions.

Qualifications

• Proven experience in designing and delivering large-scale enterprise solutions.
• Strong background in architecture governance and standards.
• Experience bridging application, cloud, network, and security domains.
• Hands-on involvement in Azure VWAN or similar cloud migration projects.

Responsibilities

• Lead end-to-end solution architecture for migration to Azure VWAN.
• Define migration strategies for complete application stacks including web apps, APIs, databases and integrations.
• Ensure alignment with enterprise architecture, security and modernization standards.
• Oversee firewall and WAF design, policy changes and decommissioning of legacy hub-and-spoke setups.
• Design VWAN network architecture: routing, UDRs, connectivity, micro-segmentation, hybrid-cloud.
• Collaborate with development teams to validate cloud readiness and modernization opportunities.

Skills

Solution architecture

Application development

Enterprise architecture

Azure cloud migration

Job description

Solution Architect – Azure VWAN Migration Program

Location

Calgary; Hybrid (3 days/week onsite: Monday, Tuesday, Thursday)

Experience Required

• Strong experience in solution architecture, application development, and enterprise architecture.
• Experience leading large-scale Azure cloud migration and transformation programs.
• Hands-on experience designing secure, scalable, cloud-based enterprise solutions.
• Experience across application, cloud, network, security, and infrastructure domains.

The Solution Architect will lead the architecture, design, governance, and execution of a strategic migration from a traditional Hub-and-Spoke network architecture to Azure Virtual WAN (VWAN). This role requires strong expertise in application development, solution design, and enterprise architecture, with the ability to bridge application, cloud, network, security, and infrastructure domains.

The ideal candidate will have hands-on experience designing and developing enterprise applications and transforming them into scalable, secure, cloud-based solutions. The architect will ensure that application and infrastructure migrations are executed together, minimizing risk while improving performance, resiliency, and operational efficiency.

Key Responsibilities

• Lead end-to-end solution architecture, design, and governance for migration from Hub-and-Spoke architecture to Azure VWAN.
• Ensure alignment with enterprise architecture, cloud, security, and application modernization standards.
• Define and implement application-centric migration strategies for complete application stacks, including:
  • Web applications
  • Middleware
  • APIs
  • Databases
  • Integrations
  • Infrastructure components
• Assess current-state applications and design target-state architectures that support scalability, resiliency, security, performance, and maintainability within Azure.
• Perform application portfolio assessments and dependency analysis across:
  • DMZ-hosted applications
  • Internal systems
  • Databases
  • APIs
  • Shared services
  • Third-party integrations
• Collaborate with application development teams to review application architecture, identify modernization opportunities, and validate cloud readiness.
• Define and oversee transit firewall decommissioning strategies while maintaining security, compliance, and business continuity.
• Lead the implementation of Web Application Firewall (WAF) architecture and compliance standards in Azure.
• Design and govern Azure VWAN network architecture, including:
  • Routing
  • Traffic engineering
  • User Defined Routes (UDRs)
  • Connectivity
  • Micro-segmentation
  • Hybrid-cloud integration
• Oversee firewall policy redesign and migration for secure communication across DMZ, internal environments, Azure services, and application workloads.
• Define and execute the roadmap to decommission legacy Hub-and-Spoke architecture and transition to Azure VWAN.
• Lead architecture reviews covering:
  • Application integrations
  • Authentication mechanisms
  • API communications
  • Data flows