Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance, and roadmap development rather than day-to-day operations.

Must Haves

- 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
- Zero Trust architecture principles and network security policy governance and standards development
- Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
- Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition

Nice to Have

- Azure Landing Zone security architecture; Azure Virtual WAN
- Service mesh and workload identity; container security and Kubernetes networking
- SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
- Airline, transportation,



critical infrastructure, or highly regulated industries; large enterprise environments supporting OT and IT

Responsibilities

- Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
- Define security zones, trust boundaries, and east-west traffic control requirements
- Define Azure segmentation architecture and network security guardrails
- Establish policy lifecycle processes and governance requirements
- Produce executive-level recommendations and decision documents
- Assess existing firewall policies and segmentation controls

Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319

Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance,



and roadmap development rather than day-to-day operations.

Contract, Calgary, Remote, Working Hours: MST

Must Haves

- 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
- Zero Trust architecture principles and network security policy governance and standards development
- Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
- Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition

Nice to Have

- Azure Landing Zone security architecture; Azure Virtual WAN
- Identity-based segmentation approaches
- Service mesh and workload identity; container security and Kubernetes networking
- SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
- Airline, transportation, critical infrastructure, or highly regulated industries; large enterprise environments supporting OT and IT

Responsibilities

- Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
- Define security zones, trust boundaries, and east-west traffic control requirements
- Design workload models leveraging VMware NSX/vDefend
- Define Azure segmentation architecture and network security guardrails
- Establish policy lifecycle processes and governance requirements
- Produce executive-level recommendations and decision documents
- Assess existing firewall policies and segmentation controls

Disclaimer:
AI may be used in evaluating ca

📌 Senior Network Security Architect (Calgary)
🏢 S.I. Systems
📍 Calgary