Senior WAF Migration Architect

Capco; Toronto; On-site; CAD 153,000 - 197,000; Full time

Benefits offered by this job

Comprehensive Benefits Coverage – 100%

RRSP with employer match

Virtual Health Care

EFAP – Employee & Family Assistance

Parental Leave Top-Up

New Parent Gift

Wellness Support

Business Coach from Day 1

Job summary

Capco in Toronto, Canada, seeks a Senior WAF Migration Architect to lead end-to-end architecture and migration of Web Application Firewall capabilities to Cloudflare and Akamai. You will own current-state assessments, target-state architecture, and migration strategy to ensure secure, compliant, and low-risk adoption.

You will partner with security, network, cloud, application, and infrastructure teams to deliver scalable, enterprise-grade WAF solutions with robust policies and controls, aligned

Qualifications

• 12+ years of experience across cybersecurity, network security, infrastructure, cloud, or application security.
• Extensive experience designing enterprise WAF solutions with Cloudflare or Akamai.
• Strong understanding of DNS, CDN, HTTP/HTTPS, TLS, traffic routing, and web security.
• Ability to translate security and business requirements into practical technical architectures.

Responsibilities

• Lead current-state assessments and define the target-state WAF architecture across Cloudflare and Akamai, including security policies, traffic routing, DNS, CDN integration, and application onboarding.
• Define the end-to-end WAF migration strategy, including migration waves, testing approaches, rollback strategies, and cutover requirements.
• Establish WAF security architecture, policies, rules, and controls aligned with enterprise security, performance, availability, and compliance requirements.
• Partner with security, network, cloud, application, and infrastructure teams to resolve architectural and technical dependencies throughout the migration.
• Provide architectural oversight across migration execution, testing, cutover, and stabilization to support secure and reliable adoption of the target platforms.

Skills

WAF architecture

Cloudflare/Akamai

DNS & CDN

Migration strategy

Cross-functional leadership

Tools

Terraform

Job description

Shape the architecture behind secure, resilient, enterprise-scale WAF migrations.

The Role

As a Senior WAF Migration Architect, you will lead the end-to-end architecture and migration of Web Application Firewall (WAF) capabilities to Cloudflare and Akamai. You will own the current-state assessment, target-state architecture, migration strategy, security policies, traffic routing, DNS and CDN integration, and application onboarding approach.

Working closely with security, network, cloud, application, and infrastructure teams, you will help deliver a secure and low-risk migration while ensuring the target platforms meet enterprise security, performance, availability, and compliance requirements.

What You’ll Do

• Lead current-state assessments and define the target-state WAF architecture across Cloudflare and Akamai, including security policies, traffic routing, DNS, CDN integration, and application onboarding.
• Define the end-to-end WAF migration strategy, including migration waves, technical dependencies, testing approaches, rollback strategies, and cutover requirements.
• Establish WAF security architecture, policies, rules, and controls aligned with enterprise security, performance, availability, and compliance requirements.
• Partner with security, network, cloud, application, and infrastructure teams to resolve architectural and technical dependencies throughout the migration.
• Provide architectural oversight across migration execution, testing, cutover, and stabilization to support secure and reliable adoption of the target platforms.

What We’re Looking For

• 12+ years of relevant experience across cybersecurity, network security, infrastructure, cloud, or application security, including significant experience designing enterprise WAF solutions.
• Deep knowledge of WAF architecture and hands-on experience with Cloudflare and/or Akamai in complex enterprise environments.
• Strong understanding of DNS, CDN technologies, HTTP/HTTPS, TLS, traffic routing, application delivery, web security, and associated integration patterns.
• Experience defining enterprise-scale migration architectures, migration waves, testing strategies, rollback approaches, and technical dependency management.
• Proven ability to work across security, network, cloud, application, and infrastructure teams and translate security and business requirements into practical technical architectures.

Bonus Points For

• Experience leading large-scale WAF migration or modernization programmes involving Cloudflare and Akamai.
• Knowledge of broader Cloudflare and Akamai security, CDN, application delivery, and traffic management capabilities.
• Experience designing highly available and resilient security architectures within complex enterprise environments.
• Familiarity with automation, APIs, infrastructure-as-code, and modern approaches to managing security infrastructure at scale.
• Experience designing security architecture within financial services or another highly regulated environment.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions
• Work in a collaborative, flat, and entrepreneurial consulting culture
• Access continuous learning, training, and industry certifications
• Be part of a team shaping the future of digital financial services
• Help shape the future of digital transformation across FS & Energy.

Benefits

• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
• Virtual Health Care – Company-paid program available to all employees and their dependents/partners
• Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
• Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
• New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
• Wellness Support – Fitness reimbursement benefit to promote health and well-being
• Business Coach from Day 1 – Personalized one‑on‑one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand‑aligned job postings that accurately reflect role requirements, and AI‑scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job‑related knowledge, skills, experience and internal equity.

Canada Pay Transparency

$153,000—$197,000 CAD