intermediate network designer.

We are seeking a highly skilled and analytical Intermediate Network Designer to lead the architectural evaluation, cloud network configuration, and migration connectivity tracks for a major enterprise infrastructure modernization. In this role, you will take technical ownership of reviewing current high-level topologies, performing rigorous network assessments, and neutralizing connectivity gaps across on-premises environments and public cloud spaces. Operating as a core routing and perimeter defense engineer, you will design secure gateway access networks, validate complex IP ranges, and establish hybrid landing zones to ensure seamless data-center-to-cloud migrations.

Location: Toronto, ON (Fully Onsite - 5 days per week)

Duration: 6-month contract.

Advantages
Advanced Hybrid Scope: Drive a highly visible infrastructure project linking enterprise on-premises data centers directly with modern cloud platforms.

High-Demand Azure Mastery: Take full control over advanced cloud networking fabrics, automated firewalls, and secure enterprise gateway routing components.

Full-Lifecycle Migration Footprint: Expand your technical portfolio by directly architecting the network readiness path for large-scale application workloads.

Deep Architectural Ownership: Act as the technical authority validating security topologies, IP routing schemas, and cloud perimeter controls.

Responsibilities
Security Architecture & Network Design: Plan, research, and design secure network architectures, identifying technical operational gaps and recommending structural performance enhancements.

Hybrid Cloud Connectivity Engineering: Architect, configure, and optimize the Azure-side Site-to-Site VPN connectivity model, managing components like VPN Gateways and Local Network Gateways.

Perimeter Defense Implementation: Deploy, configure, and maintain the Azure Firewall engine alongside on-premises security devices to enforce strict traffic-filtering rules.

Network Infrastructure Auditing: Formulate and review detailed technical requirements for localized and wide-area networks (LAN/WAN), virtual private networks (VPN), physical routers, switches, and associated boundary devices.

Dependency & Protocol Validation: Verify subnets, IP ranges, BGP routing policies, DNS zones, firewall parameters, and migration-related transit dependencies to ensure uninterrupted communication.

Cross-Site Infrastructure Coordination: Partner directly with central network teams and data center operations resources to coordinate physical network device configurations and policy updates.

Migration Target Readiness: Review replication appliance states, validate landing zone infrastructure placements, confirm target virtual machine sizing structures, and configure initial replication prerequisites.

Resilience & Governance Baselining: Prepare target network and security policies for newly migrated virtual machines, outlining baseline configurations for automated backups, performance monitoring dashboards, and threat detection agents.

Network Triage & Validation: Execute automated smoke testing matrices over newly established virtual connections, providing specialized routing and firewall troubleshooting for migration-related traffic anomalies.

Qualifications
Core Network Engineering Seniority: Minimum of 7+ years of progressive professional experience planning, designing, and optimizing complex enterprise network architectures and perimeter security controls.

Azure Network Specialization: Proven, hands-on experience implementing Azure Firewall alongside configuring Azure-side VPN Gateways and Local Network Gateway architectures.

LAN/WAN Infrastructure Literacy: Demonstrated experience developing and reviewing installation specifications for LANs, WANs, VPN networks, physical routers, and enterprise hardware switches.

Subnet & Protocol Acumen: Verified proficiency validation mapping out overlapping IP ranges, complex routing frameworks, DNS name resolution dependencies, and firewall port metrics.

Hybrid Connectivity Experience: Practical experience confirming, designing, and standing up secure Site-to-Site VPN links across multiple distributed physical environments and public cloud zones.

Workload Migration Background: Foundational exposure to cloud migration mechanics, appliance configurations, and target virtual machine sizing rules.

Soft Skills: Exceptional analytical thinking, structural design documentation skills, and verbal/written communication, with a track record of coordinating technical implementations with cross-functional network partners.

Highly Preferred Assets:
Professional network engineering certifications such as CCNA, CCNP, or specialized wireless security credentials.

Professional Microsoft Azure certifications such as AZ-700 (Azure Network Engineer) or AZ-305 (Azure Solutions Architect).

Prior technical networking experience operating within a Canadian public sector framework or highly regulated multi-setting enterprise landscape.

Summary
If you're interested in the "Intermediate Network Designer" role based in Toronto, we encourage you to apply online at Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to View email address on randstad.com to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies. show more