Network Security Solution Architect - Azure Virtual WAN; VWAN

Network Security (Solution Architect)

Calgary

Work Model: Hybrid (3 days/week in office)

• Lead end‑to‑end architecture design and governance for migration from Hub‑and‑Spoke to Azure VWAN, ensuring alignment with enterprise cloud and security standards.
• Define and implement application‑centric migration strategies, ensuring complete application stacks (DMZ and internal dependencies) are migrated together.
• Design and oversee transit firewall decommissioning to reduce routing complexity, latency, and operational overhead.
• Lead Web Application Firewall (WAF) compliance implementation in Azure for all internet‑facing applications.
• Define and execute roadmap to decommission legacy Hub‑and‑Spoke architecture and transition fully to VWAN.
• Drive network architecture design, including:
  • Routing
  • UDR optimization
  • Traffic flows
  • Micro‑segmentation within VWAN
• Oversee firewall policy redesign and migration, ensuring secure connectivity between DMZ and internal environments.
• Perform application dependency analysis across DMZ and internal systems to minimize latency and ensure seamless functionality.
• Define migration patterns and playbooks, including:
  • Re‑IP strategies
  • Domain migration
  • Service accounts
  • Cutover strategies
• Provide hands‑on architectural support during migration execution, including troubleshooting, validation, and real‑time decision‑making.
• Collaborate with Cloud, Network, Security, Infrastructure, and Application teams for coordinated delivery.
• Identify and mitigate risks related to:
  • Shared databases
  • Cross‑network dependencies
  • Performance constraints
• Establish and enforce architecture governance, standards, and reusable design patterns.
• Support migration activities across EST and MST time zones, including critical migration windows.
• Present architecture decisions and migration impacts to senior stakeholders, translating technical concepts into business insights.