Cloud Network Architect

We are looking for an experienced Cloud Network Architect with deep Microsoft Azure networking expertise to join our Solution Architecture team. This role will provide specialized expertise across cloud hybrid and enterprise networking helping design and support secure resilient scalable and highly available infrastructure solutions.

The successful candidate will combine strong networking fundamentals with hands-on Azure experience and will be comfortable working across both architecture and implementation. Responsibilities will include developing solution designs reviewing network and security configurations providing technical guidance during implementation and migration activities and troubleshooting complex connectivity routing DNS firewall WAF TLS load-balancing and performance issues.

Azure is the primary cloud platform for this role. The position will also support connectivity across on-premises environments Kubernetes platforms third-party providers partner networks and other cloud environments. Familiarity with Oracle Cloud Infrastructure (OCI) is an asset but deep OCI specialization is not required.

This is not a documentation-only architecture role. The Cloud Network Architect will work closely with architects engineering infrastructure cybersecurity application vendor carrier and operational teams to translate business and technical requirements into practical network solutions and support their successful implementation.

The role will also contribute to architecture standards reusable patterns technical documentation and the continued evolution of our cloud networking and infrastructure practices.

Design secure scalable resilient and supportable network architectures across Microsoft Azure on-premises and hybrid cloud environments.

Translate application security availability compliance and business requirements into practical network solutions and detailed technical designs.

Develop network architectures covering topology traffic flow routing segmentation DNS ingress and egress load balancing firewall/WAF controls and private connectivity.

Provide hands-on technical guidance during implementation migration testing production deployment and complex troubleshooting activities.

Review and troubleshoot network firewall WAF DNS routing NAT TLS certificate load-balancing connectivity and performance configurations and issues.

Design and support multi-region high-availability disaster recovery and secure hybrid connectivity solutions.

Support connectivity between Azure on-premises environments Kubernetes platforms OCI third-party providers partner networks and cloud interconnection services.

Collaborate with architecture engineering cybersecurity application infrastructure vendor carrier and operational teams to deliver and support network solutions.

Contribute to architecture reviews technical standards reusable patterns implementation guidance operational documentation and Infrastructure as Code practices.

Mentor technical team members and contribute to the continued development of cloud networking security and infrastructure practices.

7-10 years of experience in enterprise networking cloud infrastructure solution architecture or related technical roles including at least 3-5 years of practical experience with Azure networking and hybrid cloud environments.

Strong networking fundamentals including TCP/IP subnetting routing switching network segmentation DNS DHCP NAT/SNAT BGP VPN technologies and end-to-end traffic flow analysis.

Strong hands-on experience with Azure networking technologies including Virtual Networks VNet peering Network Security Groups route tables Azure Firewall Application Gateway/WAF Load Balancer Front Door Private Link/private endpoints Azure DNS/Private DNS ExpressRoute VPN Gateway NAT Gateway and Network Watcher.

Practical experience designing and troubleshooting hybrid connectivity private connectivity Layer 4 and Layer 7 load balancing routing DNS HTTP/HTTPS TLS SNI and certificates.

Hands-on experience with enterprise firewall and Web Application Firewall technologies including security policies NAT application publishing inbound/outbound and east-west traffic controls TLS termination logging and troubleshooting.

Experience designing and supporting network redundancy high availability regional failover disaster recovery monitoring and performance troubleshooting including latency packet loss throughput timeout and connectivity issues.

Practical knowledge of SD-WAN and enterprise connectivity concepts including IPsec BGP underlay/overlay networking dynamic path selection traffic prioritization automated failover and cloud/private interconnection.

Understanding of Azure Kubernetes Service (AKS) and Kubernetes networking concepts including IP planning Azure CNI services ingress/egress internal load balancing private clusters network policies DNS routing and workload connectivity.

Intermediate working knowledge of Terraform and familiarity with Infrastructure as Code practices Bicep Git YAML/JSON reusable modules state management environment separation and CI/CD pipelines such as Azure DevOps.

Experience applying network security principles including zero trust segmentation least-privilege connectivity secure administrative access TLS/certificate management logging monitoring auditing and incident investigation.

Assets

Hands-on experience with F5 Distributed Cloud Fortinet FortiGate Infoblox or comparable enterprise networking firewall WAF DNS DHCP and IPAM platforms.

Experience with cloud interconnection and network service providers such as Equinix Fabric Megaport Console Connect or comparable platforms.

Experience coordinating network provisioning and troubleshooting with telecom carriers internet service providers cloud connectivity providers and external network partners.

Familiarity with OCI networking including Virtual Cloud Networks routing security controls gateways load balancing DNS VPN/private connectivity and Azure-to-OCI connectivity.

Experience working in regulated or security-sensitive environments including environments aligned with PCI DSS SOC 2 or ISO 27001.

Experience in banking financial services payments or other highly available enterprise environments.

Relevant Azure networking cloud or security certifications.

Qualifications and Professional Skills

Bachelors degree in computer science information technology network engineering or a related discipline or equivalent practical experience.

Demonstrated experience designing and supporting production network environments.
Strong analytical and structured problem-solving skills with the ability to trace end-to-end traffic flows and identify connectivity or performance issues.

Ability to explain complex network and cloud concepts clearly to technical and non-technical stakeholders.

Ability to communicate technical recommendations dependencies constraints risks and architectural trade-offs.

Collaborative approach to working across architecture engineering cybersecurity application vendor carrier and operational teams.

Ability to create clear architecture diagrams traffic-flow diagrams implementation guidance and technical documentation.

Willingness to participate in implementation troubleshooting incident reviews mentoring and continuous improvement activities.

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level geographic market experience and training and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $90000 -$140000. This role is an existing vacancy.

#LI - OA1

Use of the term architect in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices architecture or possesses the requisite license as prescribed by the applicable provincial or territorial architect regulator. We are seeking individuals with expertise in IT architect-related functions but licensure from an architect regulator is not a prerequisite for this position. Architecture is a regulated profession in Canada which is restricted in terms of use of titles and designation.

• Azure Cloud
• Firewalling Fortinet
• Firewalls
• IP Networking
• Network Architecture
• Network engineering
• Solutions Architecture
• Terraform
• Web application development
• Oracle Cloud Infrastructure

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer being able to perform your best during the recruitment process is important to us. If you require an accommodation please inform your recruiter.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

To learn more about accessibility at CGI contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our teamone of the largest IT and business consulting services firms in the world.