Sr. Network Security Architect

Remote - Calgary, AB Contract Salary not specified

Contract

Procom is recruiting on behalf of its client for a remote, 12-month contract assignment. The assignment runs January through December 2027, with a stated start date of January 1, 2027. The posting lists Calgary, AB.

Define and mature enterprise network security architecture, focusing on microsegmentation, security policy design, and Zero Trust principles. Develop segmentation strategy across data centre, virtualized, and public cloud environments, providing architectural guidance to engineering teams. The role emphasizes architecture, design, governance, and roadmap development rather than day-to-day operations or hands-on implementation.

• Develop a multi-year segmentation roadmap aligned with Zero Trust objectives.
• Define enterprise security zones, trust boundaries, and future-state reference architectures.
• Establish network security policy standards, classification models, and policy lifecycle processes.
• Design workload microsegmentation models using VMware NSX/vDefend, including east-west traffic controls.
• Define Azure segmentation architecture, security zoning, and cloud network security guardrails.
• Set hybrid connectivity security requirements and align data centre and cloud controls.
• Create architecture standards and design-authority documentation;
  facilitate reviews and design workshops.
• Assess firewall policies and segmentation controls, document current-state gaps, and recommend prioritized remediation.
• Prepare executive recommendations and decision documents.

• 10+ years in network security architecture, network architecture, or cybersecurity architecture.
• Experience designing enterprise segmentation strategies and security policy frameworks and governance models.
• Experience with large-scale hybrid cloud and data centre security architectures.
• Deep understanding of microsegmentation, Zero Trust, and east-west traffic security models.
• Architecture experience with Palo Alto Networks NGFWs and VMware NSX and/or Broadcom vDefend.
• Experience with Microsoft Azure networking and security services.
• Knowledge of security zoning, trust boundaries, reference architecture, risk assessment, and threat modelling.
• Strong documentation skills, including executive presentations, architecture decision records, standards, and roadmaps.

• Azure Landing Zone security architecture and Azure Virtual WAN experience.
• Identity-based segmentation, SDN, security automation, and policy orchestration knowledge.
• Knowledge of service mesh, workload identity, container security, and Kubernetes networking.
• Relevant certifications such as SABSA, TOGAF, CISSP, CCDE, CCIE Security, VMware VCAP-NV, Palo Alto PCNSC, or Azure Security.
• Experience in airline, transportation, critical infrastructure, regulated, or large enterprise OT and IT environments.