Senior Cloud Network & Security Architect
Design, Build, Secure and Operate Canada's Next Generation Cloud Networks
About AirGate
AirGate Technologies is a Canadian-owned Microsoft Solutions Partner specializing in Azure Infrastructure, Security, Data & AI, Modern Work and Managed Services.
We help organizations across healthcare, government, financial services, manufacturing and commercial sectors modernize their technology using Microsoft Azure.
Our team designs and delivers enterprise Azure Landing Zones, hybrid cloud environments, networking, security, Microsoft Fabric, AI infrastructure and managed cloud services for customers across Canada.
As we continue to grow, we're looking for a Senior Cloud Network & Security Architect to join our team.
This is a senior consulting role focused on designing, deploying, operating and continuously improving enterprise Azure networking and security environments.
Position Summary
The Senior Cloud Network & Security Architect is responsible for the architecture, deployment, optimization and ongoing operational success of enterprise cloud networking environments across Microsoft Azure.
Unlike many architecture roles, this is a hands-on consulting position. You will lead the design of complex networking solutions while remaining actively involved in deployments, troubleshooting, customer workshops and major production implementations.
You'll work directly with our Principal Enterprise Architect and collaborate with our Azure Infrastructure, Security, Data Platform and AI teams to build secure cloud foundations that enable modern applications, Microsoft Fabric, AI workloads and enterprise cloud adoption.
You will also play a key role in shaping and delivering AirGate's Managed Cloud Networking Services, helping customers continuously optimize their environments long after initial deployment.
Mission
Design, deploy, operate and continuously optimize secure Microsoft Azure networking environments while helping build one of Canada's leading Microsoft cloud consulting practices.
You will own the networking lifecycle from architecture through deployment, operational handover, managed services and continuous improvement.
Key Responsibilities
Cloud Network Architecture
Design and implement enterprise Azure networking solutions including:
- Azure Virtual WAN (vWAN)
- Hub-and-Spoke networking
- Azure Virtual Networks
- ExpressRoute
- Site-to-Site VPN
- Point-to-Site VPN
- Azure Route Server
- Azure Load Balancer
- Azure Application Gateway
- Azure Front Door
- Azure DNS
- Azure Private DNS
- Private Link
- Private Endpoints
- Azure NAT Gateway
- Network segmentation and micro-segmentation
- High availability and resilient network architectures
Cloud Security
Design and implement secure networking solutions using:
- Azure Firewall Premium
- Web Application Firewall (WAF)
- Network Security Groups
- Microsoft Defender for Cloud
- Microsoft Sentinel integration
- Zero Trust networking principles
- Secure hybrid connectivity
- Network encryption
- Secure Internet breakout
- Enterprise network segmentation
Hybrid Cloud Connectivity
Lead customer deployments involving:
- ExpressRoute
- ExpressRoute Global Reach
- High Availability connectivity
- BGP routing
- Hybrid routing optimization
- Disaster Recovery networking
- Multi-region Azure networking
- ISP and telecommunications coordination
- Enterprise WAN modernization
Enterprise Networking
Integrate Azure with enterprise environments including:
- Cisco enterprise routing and switching
- Juniper enterprise networking
- SD-WAN solutions
- Enterprise firewalls
- MPLS migrations
- Data centre networking
- Campus networking
- Hybrid connectivity architectures
Candidates should possess CCIE-level Cisco knowledge (or equivalent enterprise experience) together with deep Juniper expertise.
Hands-On Delivery
This is not a management-only or architecture-only position.
At AirGate we lead from the front.
You will be expected to:
- Design complex customer solutions.
- Build production environments.
- Deploy Azure networking infrastructure.
- Configure Azure Firewall Premium and networking services.
- Troubleshoot critical customer incidents.
- Participate in production cutovers.
- Support after-hours implementations when required.
- Mentor engineers while working alongside them.
- Build Infrastructure as Code templates.
- Improve deployment automation.
- Produce high-quality technical documentation.
If you enjoy solving complex technical problems and working directly with customers, you'll thrive in this role.
Managed Cloud Services Leadership
You will help lead and evolve AirGate's Managed Cloud Networking Services.
Responsibilities include:
Operational Leadership
- Act as the senior escalation point for complex networking issues.
- Perform proactive health assessments.
- Review customer environments for optimization opportunities.
- Recommend improvements for resilience, security and performance.
- Support major customer incidents and root cause investigations.
- Lead complex maintenance activities and network changes.
- Develop operational roadmaps for customers.
Service Development
Help build AirGate's next generation Managed Cloud Services by:
- Developing standardized deployment methodologies.
- Building reusable Infrastructure as Code templates.
- Creating operational runbooks.
- Improving monitoring and alerting.
- Developing networking health scorecards.
- Standardizing customer environments.
- Supporting AI-enabled operational automation.
- Driving continuous improvement across our managed services practice.
Practice Development
Approximately 10–15% of your time will focus on strengthening AirGate's networking practice through:
- Developing technical standards.
- Creating reusable deployment templates.
- Building automation.
- Reviewing solution designs.
- Mentoring engineers.
- Delivering internal technical workshops.
- Writing best practices and operational guidance.
- Supporting pre-sales workshops and customer architecture sessions.
Cross-Functional Collaboration
You'll work closely with AirGate's:
- Azure Infrastructure Team
- Security Team
- Data Platform Team
- AI Solutions Team
- Customer Delivery Managers
- Principal Enterprise Architect
Supporting projects involving:
- Microsoft Fabric
- Azure AI Foundry
- Azure OpenAI
- Azure Kubernetes Service (AKS)
- Azure Red Hat OpenShift (ARO)
- Azure Virtual Desktop
- Enterprise Azure Landing Zones
- Large-scale Azure migrations
- Disaster Recovery
- Managed Services including ExpressRoute
Required Qualifications
- 8+ years of enterprise networking experience (or service provider routing experience.
- Extensive Azure networking expertise.
- Proven Azure Virtual WAN experience.
- Extensive Azure ExpressRoute design and deployment experience.
- Strong Azure Firewall Premium experience.
- Proven, advanced routing and switching knowledge including BGP, OSPF and others.
- Deep hybrid networking expertise.
- Strong troubleshooting and root cause analysis skills.
- Experience delivering consulting engagements directly with customers.
- Hands-on experience deploying enterprise networking solutions.
Preferred Qualifications
- Microsoft Azure networking certifications.
- Cisco CCIE certification or equivalent enterprise experience.
- Juniper expert-level experience.
- Experience with Infrastructure as Code (Bicep and/or Terraform).
- Experience supporting managed cloud services.
- Experience mentoring technical teams.
Key Performance Indicators
Success in this role will be measured by:
Customer Success
- Customer Satisfaction (CSAT)
- Technical quality of delivered solutions
- Customer retention
- Executive customer feedback
Delivery Excellence
- Successful project delivery
- First-time implementation quality
- Documentation quality
- Operational handover quality
- Deployment consistency
Managed Services
- Customer environment stability
- Incident reduction through proactive improvements
- Service quality
- Automation adoption
- Operational efficiency
Practice Leadership
- Mentoring and coaching
- Knowledge sharing
- Standards development
- Automation contributions
- Technical innovation
Compensation
Base Salary plus Performance Bonus: , based on:
- Customer Satisfaction
- Delivery Quality
- Practice Development
- Managed Services Improvements
- Automation
- Knowledge Sharing
- Mentoring
- Business Contribution
Additional benefits include:
- Fully remote (Canada) with in person meetings from time to time.
- Professional development budget
- Microsoft (including AI), Cisco and Juniper certification support
- Flexible work environment
- Opportunity to work on some of Canada's most advanced Azure networking projects
Career Growth
This is one of AirGate's most senior technical consulting positions.
You'll work directly with our Principal Enterprise Architect on complex enterprise cloud networking and security engagements while helping shape the future of our Managed Cloud Services practice.
As AirGate grows, you'll have opportunities to:
- Lead increasingly complex enterprise programs.
- Define AirGate's networking standards and best practices.
- Build AI-enabled operational capabilities.
- Mentor the next generation of cloud architects.
- Influence our managed services portfolio.
- Grow into a Principal Architect or Technical Practice Lead role.
Why Join AirGate?
At AirGate, you'll do far more than design networks—you'll help build the secure cloud foundations that power AI, analytics, modern applications and enterprise digital transformation.
You'll join a collaborative team of architects and engineers who value technical excellence, customer success, continuous learning and innovation.
If you're passionate about enterprise networking, cloud architecture, security and solving complex technical challenges—and you enjoy staying hands-on while helping build a growing consulting practice—we'd love to meet you.
Pay: $125,000.00-$175,000.00 per year
Benefits:
- Casual dress
- Company events
- Dental care
- Extended health care
- Flexible schedule
- Paid time off
- Vision care
- Work from home
Education:
- Bachelor's Degree (preferred)
Experience:
- Azure Networking: 5 years (required)
- Advanced Routing with BGP, OSPF, MPLS, vWAN, SASE, SD WAN: 8 years (required)
- Service Provider or Large Enterprise Networking: 8 years (required)
Licence/Certification:
- Cisco Certified Internetwork Expert (CCIE), Cisco Systems (required)
- Azure Architect Level Certifications (required)
Work Location: Hybrid remote in Greater Toronto Area, ON
