Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319 Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319 Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance, and roadmap development rather than day-to-day operations. Must Haves
- 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
- Zero Trust architecture principles and network security policy governance and standards development
- Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
- Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition Nice to Have
- Azure Landing Zone security architecture; Azure Virtual WAN
- Service mesh and workload identity; container security and Kubernetes networking
- SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
- Airline, transportation, critical infrastructure,



or highly regulated industries; large enterprise environments supporting OT and IT Responsibilities
- Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
- Define security zones, trust boundaries, and east-west traffic control requirements
- Define Azure segmentation architecture and network security guardrails
- Establish policy lifecycle processes and governance requirements
- Produce executive-level recommendations and decision documents
- Assess existing firewall policies and segmentation controls Our consumer business client is seeking a Senior Network Security Architect (10+ years) to define and mature enterprise network security architecture within a hybrid data center and cloud environments 0540319 Drive an enterprise-wide security architecture mandate focused on segmentation and Zero Trust across on‑premises and cloud environments. Lead strategy, policy frameworks, and roadmaps leveraging Palo Alto Networks NGFWs, VMware NSX/vDefend, Microsoft Azure, and Azure Firewall. Partner with Network Services, Cybersecurity, Infrastructure, Cloud, and Application teams to formalize security zones, trust boundaries, and communication patterns. This role centers on architecture, design, governance,



and roadmap development rather than day-to-day operations. Contract, Calgary, Remote,

Working Hours
MST Must Haves
- 10+ years in Network Security Architecture, network architecture, or cybersecurity architecture
- Zero Trust architecture principles and network security policy governance and standards development
- Architectures utilizing Palo Alto Networks NGFWs, VMware NSX/vDefend, and Microsoft Azure networking and security services
- Large-scale hybrid cloud and data center security architectures, including security zoning and trust boundary definition Nice to Have
- Azure Landing Zone security architecture; Azure Virtual WAN
- Identity-based segmentation approaches
- Service mesh and workload identity; container security and Kubernetes networking
- SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, Microsoft Azure Security certifications
- Airline, transportation, critical infrastructure, or highly regulated industries; large enterprise environments supporting OT and IT Responsibilities
- Develop a multi-year enterprise segmentation roadmap aligned to Zero Trust objectives
- Define security zones, trust boundaries, and east-west traffic control requirements
- Design workload models leveraging VMware NSX/vDefend
- Define Azure segmentation architecture and network security guardrails
- Establish policy lifecycle processes and governance requirements
- Produce executive-level recommendations and decision documents
- Assess existing firewall policies and segmentation controls Disclaimer: AI may be used in evaluating candidates. This posting is for an existing vacancy.

📌 Senior Network Security Architect (Calgary)
🏢 S.i. Systems
📍 Calgary