Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

S I Systems; Calgary; Hybrid; CAD 120,000 - 180,000; Full time

Job summary

S.I. Systems Ltd. in Calgary seeks a Senior Network Security Architect with 10+ years to define and mature enterprise network security architecture across hybrid data centers and cloud environments.

Lead strategy, policy frameworks, and roadmaps across on-premises and cloud, leveraging Palo Alto, NSX/vDefend, and Azure security services while partnering with cross-functional teams. This role focuses on architecture, governance, and roadmaps rather than day-to-day operations, with a strong

Qualifications

• 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture.
• Zero Trust architecture principles and policy governance and standards development.
• Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services.
• Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition.

Responsibilities

• Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
• Define security zones, trust boundaries, and east-west traffic control requirements
• Define Azure segmentation architecture and network security guardrails
• Establish policy lifecycle processes and governance requirements
• Produce executive-level recommendations and decision documents
• Assess existing firewall policies and segmentation controls

Skills

Network security

Zero Trust

Hybrid cloud security

Azure networking

Tools

Palo Alto NGFWs

VMware NSX/vDefend

Azure security services

Job description

Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance, and roadmap development rather than day-to-day operations.

Must Haves

• 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
• Zero Trust architecture principles and network security policy governance and standards development
• Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
• Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition

Nice to Have

• Azure Landing Zone security architecture; Azure Virtual WAN
• Service mesh and workload identity; container security and Kubernetes networking
• SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
• Airline, transportation, critical infrastructure, or highly regulated industries; large enterprise environments supporting OT and IT

Responsibilities

• Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
• Define security zones, trust boundaries, and east-west traffic control requirements
• Define Azure segmentation architecture and network security guardrails
• Establish policy lifecycle processes and governance requirements
• Produce executive-level recommendations and decision documents
• Assess existing firewall policies and segmentation controls

Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance, and roadmap development rather than day-to-day operations.

Contract, Calgary, Remote, Working Hours: MST

Must Haves

• 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
• Zero Trust architecture principles and network security policy governance and standards development
• Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
• Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition

Nice to Have

• Azure Landing Zone security architecture; Azure Virtual WAN
• Identity-based segmentation approaches
• Service mesh and workload identity; container security and Kubernetes networking
• SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
• Airline, transportation, critical infrastructure, or highly regulated industries; large enterprise environments supporting OT and IT

Responsibilities

• Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
• Define security zones, trust boundaries, and east-west traffic control requirements
• Design workload models leveraging VMware NSX/vDefend
• Define Azure segmentation architecture and network security guardrails
• Establish policy lifecycle processes and governance requirements
• Produce executive-level recommendations and decision documents
• Assess existing firewall policies and segmentation controls

Disclaimer:
AI may be used in evaluating candidates.
This posting is for an existing vacancy.