Senior Cloud and Security Architect - Azure

Senior Cloud Network & Security Architect

Design, Build, Secure and Operate Canada's Next Generation Cloud Networks

About AirGate

AirGate Technologies is a Canadian-owned Microsoft Solutions Partner specializing in Azure Infrastructure, Security, Data & AI, Modern Work and Managed Services.

We help organizations across healthcare, government, financial services, manufacturing and commercial sectors modernize their technology using Microsoft Azure.

Our team designs and delivers enterprise Azure Landing Zones, hybrid cloud environments, networking, security, Microsoft Fabric, AI infrastructure and managed cloud services for customers across Canada.

As we continue to grow, we're looking for a Senior Cloud Network & Security Architect to join our team.

This is a senior consulting role focused on designing, deploying, operating and continuously improving enterprise Azure networking and security environments.

Position Summary

The Senior Cloud Network & Security Architect is responsible for the architecture, deployment, optimization and ongoing operational success of enterprise cloud networking environments across Microsoft Azure.

Unlike many architecture roles, this is a hands-on consulting position. You will lead the design of complex networking solutions while remaining actively involved in deployments, troubleshooting, customer workshops and major production implementations.

You'll work directly with our Principal Enterprise Architect and collaborate with our Azure Infrastructure, Security, Data Platform and AI teams to build secure cloud foundations that enable modern applications, Microsoft Fabric, AI workloads and enterprise cloud adoption.

You will also play a key role in shaping and delivering AirGate's Managed Cloud Networking Services, helping customers continuously optimize their environments long after initial deployment.

Mission

Design, deploy, operate and continuously optimize secure Microsoft Azure networking environments while helping build one of Canada's leading Microsoft cloud consulting practices.

You will own the networking lifecycle from architecture through deployment, operational handover, managed services and continuous improvement.

Key Responsibilities

Cloud Network Architecture

Design and implement enterprise Azure networking solutions including:

Azure Virtual WAN (vWAN)

Hub-and-Spoke networking

Azure Virtual Networks

ExpressRoute

Site-to-Site VPN

Point-to-Site VPN

Azure Route Server

Azure Load Balancer

Azure Application Gateway

Azure Front Door

Azure DNS

Azure Private DNS

Private Link

Private Endpoints

Azure NAT Gateway

Network segmentation and micro-segmentation

High availability and resilient network architectures

Cloud Security

Design and implement secure networking solutions using:

Azure Firewall Premium

Web Application Firewall (WAF)

Network Security Groups

Microsoft Defender for Cloud

Microsoft Sentinel integration

Zero Trust networking principles

Secure hybrid connectivity

Network encryption

Secure Internet breakout

Enterprise network segmentation

Hybrid Cloud Connectivity

Lead customer deployments involving:

ExpressRoute

ExpressRoute Global Reach

High Availability connectivity

BGP routing

Hybrid routing optimization

Disaster Recovery networking

Multi-region Azure networking

ISP and telecommunications coordination

Enterprise WAN modernization

Enterprise Networking

Integrate Azure with enterprise environments including:

Cisco enterprise routing and switching

Juniper enterprise networking

SD-WAN solutions

Enterprise firewalls

MPLS migrations

Data centre networking

Campus networking

Hybrid connectivity architectures

Candidates should possess CCIE-level Cisco knowledge (or equivalent enterprise experience) together with deep Juniper expertise.

Hands-On Delivery

This is not a management-only or architecture-only position.

At AirGate we lead from the front.

You will be expected to:

Design complex customer solutions.

Build production environments.

Deploy Azure networking infrastructure.

Configure Azure Firewall Premium and networking services.

Troubleshoot critical customer incidents.

Participate in production cutovers.

Support after-hours implementations when required.

Mentor engineers while working alongside them.

Build Infrastructure as Code templates.

Improve deployment automation.

Produce high-quality technical documentation.

If you enjoy solving complex technical problems and working directly with customers, you'll thrive in this role.

Managed Cloud Services Leadership

You will help lead and evolve AirGate's Managed Cloud Networking Services.

Responsibilities include:

Operational Leadership

Act as the senior escalation point for complex networking issues.

Perform proactive health assessments.

Review customer environments for optimization opportunities.

Recommend improvements for resilience, security and performance.

Support major customer incidents and root cause investigations.

Lead complex maintenance activities and network changes.

Develop operational roadmaps for customers.

Service Development

Help build AirGate's next generation Managed Cloud Services by:

Developing standardized deployment methodologies.

Building reusable Infrastructure as Code templates.

Creating operational runbooks.

Improving monitoring and alerting.

Developing networking health scorecards.

Standardizing customer environments.

Supporting AI-enabled operational automation.

Driving continuous improvement across our managed services practice.

Practice Development

Approximately 10–15% of your time will focus on strengthening AirGate's networking practice through:

Developing technical standards.

Creating reusable deployment templates.

Building automation.

Reviewing solution designs.

Mentoring engineers.

Delivering internal technical workshops.

Writing best practices and operational guidance.

Supporting pre-sales workshops and customer architecture sessions.

Cross-Functional Collaboration

You'll work closely with AirGate's:

Azure Infrastructure Team

Security Team

Data Platform Team

AI Solutions Team

Customer Delivery Managers

Principal Enterprise Architect

Supporting projects involving:

Microsoft Fabric

Azure AI Foundry

Azure OpenAI

Azure Kubernetes Service (AKS)

Azure Red Hat OpenShift (ARO)

Azure Virtual Desktop

Enterprise Azure Landing Zones

Large-scale Azure migrations

Disaster Recovery

Managed Services including ExpressRoute

Required Qualifications

8+ years of enterprise networking experience (or service provider routing experience.

Extensive Azure networking expertise.

Proven Azure Virtual WAN experience.

Extensive Azure ExpressRoute design and deployment experience.

Strong Azure Firewall Premium experience.

Proven, advanced routing and switching knowledge including BGP, OSPF and others.

Deep hybrid networking expertise.

Strong troubleshooting and root cause analysis skills.

Experience delivering consulting engagements directly with customers.

Hands-on experience deploying enterprise networking solutions.

Preferred Qualifications

Microsoft Azure networking certifications.

Cisco CCIE certification or equivalent enterprise experience.

Juniper expert-level experience.

Experience with Infrastructure as Code (Bicep and/or Terraform).

Experience supporting managed cloud services.

Experience mentoring technical teams.

Key Performance Indicators

Success in this role will be measured by:

Customer Success

Customer Satisfaction (CSAT)

Technical quality of delivered solutions

Customer retention

Executive customer feedback

Delivery Excellence

Successful project delivery

First-time implementation quality

Documentation quality

Operational handover quality

Deployment consistency

Managed Services

Customer environment stability

Incident reduction through proactive improvements

Service quality

Automation adoption

Operational efficiency

Practice Leadership

Mentoring and coaching

Knowledge sharing

Standards development

Automation contributions

Technical innovation

Compensation

Base Salary plus Performance Bonus: , based on:

Customer Satisfaction

Delivery Quality

Practice Development

Managed Services Improvements

Automation

Knowledge Sharing

Mentoring

Business Contribution

Additional benefits include:

Fully remote (Canada) with in person meetings from time to time.

Professional development budget

Microsoft (including AI), Cisco and Juniper certification support

Flexible work environment

Opportunity to work on some of Canada's most advanced Azure networking projects

Career Growth

This is one of AirGate's most senior technical consulting positions.

You'll work directly with our Principal Enterprise Architect on complex enterprise cloud networking and security engagements while helping shape the future of our Managed Cloud Services practice.

As AirGate grows, you'll have opportunities to:

Lead increasingly complex enterprise programs.

Define AirGate's networking standards and best practices.

Build AI-enabled operational capabilities.

Mentor the next generation of cloud architects.

Influence our managed services portfolio.

Grow into a Principal Architect or Technical Practice Lead role.

Why Join AirGate?

At AirGate, you'll do far more than design networks - you'll help build the secure cloud foundations that power AI, analytics, modern applications and enterprise digital transformation.

You'll join a collaborative team of architects and engineers who value technical excellence, customer success, continuous learning and innovation.

If you're passionate about enterprise networking, cloud architecture, security and solving complex technical challenges - and you enjoy staying hands-on while helping build a growing consulting practice - we'd love to meet you.

Pay: $125,000.00-$175,000.00 per year

Benefits:

Casual dress

Company events

Dental care

Extended health care

Flexible schedule

Paid time off

Vision care

Work from home

Education:

Bachelor's Degree (preferred)

Experience:

Azure Networking: 5 years (required)

Advanced Routing with BGP, OSPF, MPLS, vWAN, SASE, SD WAN: 8 years (required)

Service Provider or Large Enterprise Networking: 8 years (required)

Licence/Certification:

Cisco Certified Internetwork Expert (CCIE), Cisco Systems (required)

Azure Architect Level Certifications (required)

Work Location: Hybrid remote in Greater Toronto Area, ON