Network & Security Architecture

Job summary

Design and govern secure, scalable, and resilient network and security architectures across on-premises, cloud, hybrid, and edge environments. Establish architecture standards, assess risks, review managed-service designs, and provide guidance on resilience and incident response.

Job details

Network & Security Architecture Location - Mississauga Full-time Job Description Role Purpose The Network & Security Architect is responsible for designing, governing, and assuring secure, scalable, and resilient network and security architectures across on-premises, cloud, hybrid, and edge environments. This role acts as the design authority and trusted advisor, ensuring solutions align with business objectives, regulatory requirements, and operational standards. Key Responsibilities Network & Security Architecture Design end-to-end network and security solutions across LAN, WAN, WLAN, SD-WAN, data centers, cloud, internet edge, DMZ, and remote access environments. Develop secure architecture patterns including network segmentation, Zero Trust, secure inter-zone communication, high availability, redundancy, and failover. Create architecture diagrams, reference architectures, and detailed design documentation. Security Technology Architecture Architect and standardize enterprise security technologies including NGFWs, IDS/IPS, VPNs, NAC, Secure Web Gateways, and DDoS protection. Evaluate and integrate new security technologies. Ensure security controls are layered, auditable, and aligned to enterprise standards. Governance & Standards Define and maintain network and security architecture standards, design principles, and approved technology stacks. Review designs from application, cloud, and SI/MSP teams. Ensure compliance with security policies, regulatory requirements, and risk frameworks. Risk Management & Threat Modeling Conduct architecture-level risk assessments for new services, cloud migrations, and partner integrations. Lead threat modeling and defense-in-depth reviews. Ensure security risks are mitigated through design and architecture decisions. Cloud & Zero Trust Architecture Design secure networking solutions across AWS, Azure, and GCP. Define hybrid connectivity, SaaS access, and Zero Trust networking models. Integrate cloud solutions with enterprise security controls and identity-aware access patterns. Managed Services & Solution Assurance Act as the client-side design authority for SI/MSP-managed environments. Review and approve solution designs and implementations. Ensure operational readiness, SLA compliance, and prevention of non-standard technology deployments. Resilience & Incident Support Provide architectural guidance during major incidents, security events, and root cause investigations. Design resilient solutions supporting rapid recovery, fault isolation, and reduced impact during outages. Required Skills & Experience Technical Skills Strong expertise in enterprise networking, routing, switching, segmentation, and network security architectures. Experience with Firewalls, IDS/IPS, VPNs, Zero Trust, and identity-aware networking. Hands-on experience with hybrid cloud and multi-cloud networking (AWS, Azure, GCP). Strong architecture documentation, modeling, and design governance experience. Soft Skills Excellent stakeholder management and communication skills. Ability to translate technical risks into business recommendations. Strong design governance and vendor management capabilities. Ability to challenge and influence vendors, MSPs, and System Integrators. Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline. Preferred certifications: CCNP, CCIE, CISSP, CISM, or relevant Cloud Security certifications.

What you’ll do

Design and govern secure, scalable, and resilient network and security architectures across on-premises, cloud, hybrid, and edge environments. Establish architecture standards, assess risks, review managed-service designs, and provide guidance on resilience and incident response.

Requirements

Requires strong expertise in enterprise networking, network security, firewalls, IDS/IPS, VPNs, Zero Trust, and hybrid or multi-cloud networking across AWS, Azure, and GCP. A bachelor's degree in a related discipline is required; CCNP, CCIE, CISSP, CISM, or relevant cloud security certifications are preferred.

Listed skills

• Amazon Web Services · Preferred
• Microsoft Azure · Preferred
• Google Cloud · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Enterprise Networking
• Routing And Switching
• Network Segmentation
• Network Security Architecture
• Firewalls
• IDS/IPS
• VPNs
• Zero Trust
• Identity-Aware Networking
• Hybrid And Multi-Cloud Networking
• AWS
• Azure
• GCP
• Architecture Documentation
• Design Governance
• Stakeholder Management

Job areas

• Technology
• Security & Safety
• Management & Leadership
• Consulting

More jobs from Epsilon Solutions Ltd.