Solutions Architect-Network Security

Take a central role

The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment. 

Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.  

With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers:  Working Here - Bank of Canada

Find out more about the next steps in our Recruitment process. 

About the Position

As the Bank undertakes a strategic transformation to migrate all applications to Microsoft Azure and fully embrace cloud native technologies, the paradigms of network security architecture are shifting fundamentally. In this cloud centric model, Azure increasingly provides the foundational layers of network infrastructure, security, and scalability—significantly reducing reliance on traditional on-premises networking models.

We are seeking a forward-thinking Solutions Architect to join the Network Security team in Core Technology Services (CTS) portfolio within the ITS Department. Our team is recognized Bank wide for being diverse, inclusive, and passionate about enabling a digital, ready, and resilient organization.

Reporting to the Assistant Director, Network and Security Services, you will contribute to a world‑class organization that pairs strong engineering practices with automation, standardization, and modern delivery approaches.

What You Will Do

In this evolving hybrid–to–cloud operating model, you will serve as a hands-on Solution Architect responsible for designing and delivering cloud aligned network security solutions across a broad range of technologies.

Your responsibilities will include:

• Cloud Driven Network Security Architecture
• Redesign the Bank’s network security architecture to align with Azure native capabilities, reducing complexity and modernizing legacy patterns.
• Develop architectures that leverage Azure’s built in scalability, resiliency, and micro segmentation features rather than traditional perimeter-based controls.
• Design network security that is strong, well‑governed, and reliable, in environments where both security teams and attackers are increasingly using AI.
• Transition from On-Premises to Cloud Architecture
• Assess the current on-premises firewall and security deployments and lead the modernization toward cloud integrated controls.
• Drive automation, standardization, and centralized management of network security configurations to improve consistency, reduce operational complexity, and strengthen governance across cloud and hybrid environments.
• Where on-premises controls remain, optimize high availability, redundancy, and failover configurations.

• Unified Cloud Security Controls
• Integrate Secure Web Gateways (SWG), Cloud Access Security Broker (CASB) capabilities, and native Azure security services into a cohesive, cloud aligned security posture.
• Establish consistent, cloud first security policies governing data protection, secure file sharing, cloud service usage, and threat mitigation.
• Lead the design of a Zero Trust Network Access (ZTNA) framework that enables continuous identity and device posture checks and contribute to the roadmap for moving away from legacy VPN access to a modern, resilient network security architecture built on Zero Trust principles.
• Help integrate and mature key network security services, including Web Application Firewall (WAF), Distributed Denial-of-Service (DDoS) defenses, web filtering, and Data Loss Prevention (DLP), within the broader cloud security framework and in alignment with Bank security architecture.
• Hands‑On Cloud Migration Support
• Actively participate in application migrations to Azure, providing architectural leadership and hands-on design for landing zones, network segmentation, identity controls, and secure connectivity patterns.
• Deliver architectural solutions independently and collaboratively, ensuring alignment with enterprise cloud governance.
• Stakeholder Engagement & Communication
• Communicate complex technical concepts and decisions clearly, with rationale linked to business outcomes, and adapt delivery for diverse audiences, including technical teams, leadership, and business partners.
• Facilitate cross functional discussions to ensure cloud native security and networking principles are embedded across the organization.

What You Need to Succeed

You are self-motivated, intellectually curious, excited about new ways of working and able to quickly understand complex issues with minimal supervision. You thrive in a rapidly changing, collaborative environment and take pride in clear, effective communication.

You bring:

• Deep expertise in designing cloud-native network security architectures in Microsoft Azure, leveraging core services such as Virtual Networks, Azure Firewall, NSGs, Application Gateway/WAF, DDoS Protection, Private Link, VPN Gateway, ExpressRoute, and hub-and-spoke or virtual WAN connectivity models.
• Solid understanding of traditional network security technologies, including firewalls (e.g., Checkpoint, Cisco), intrusion detection and prevention systems (IDS/IPS), site-to-site and remote access VPNs, network access control (NAC), secure web gateways, proxy technologies, and network segmentation, with the ability to pivot to cloud models rapidly.
• Strong understanding of modern security paradigms including Zero Trust, SASE, identity-first access models, micro-segmentation, and security-as-code approaches in cloud environments (building upon your existing knowledge base).
• Practical experience with automation, orchestration, IaC tooling (e.g., ARM, Bicep, Terraform), and cloud native policy enforcement.
• Ability to evaluate, manage, and integrate cloud service providers and third-party vendors in a distributed architecture model.
• Strong problem-solving abilities and collaborative mindset.
• Desire to mentor others as the organization builds its cloud first capabilities.

Assets

• Experience working across diverse business and technology environments, with exposure to cloud migrations, hybrid architectures, and modern security practices.

Your Education and Experience

Your education and professional background demonstrate readiness for a cloud centric architectural role. Ideally, you have a relevant degree or diploma and 7+ years of experience, with hands-on exposure to both traditional and cloud-native security architectures.

Innovative Mindset

We value candidates who demonstrate adaptability, curiosity, and a willingness to learn new technologies, including AI and digital tools. We seek individuals who can think critically about data, question existing processes, and find ways to simplify our work while embracing change and new ways of doing things. 

Language requirement

The Bank’s work environment is conducive to the use of both of Canada’s official languages - English and French. Although the position language requirement is English or French essential, we do encourage everyone to improve second their language proficiency for future career growth and to contribute towards fostering a bilingual environment.

What you need to know

• Priority will be given to Canadian citizens and permanent residents
• Security level required: Be eligible to obtain Secret 
• Relocation assistance may be provided, if required
• Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.
• The official title for this position is “Solutions Architect ” 

Hybrid Work Model

The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a portion of each month as part of the Bank’s hybrid work model, and they are expected on site at the Bank location a minimum of 12 days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office. 

What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider. 

• Salaries are based on qualifications and experience and typically range from $126,765 to $149,135 (job grade 18)
• The Bank offers an incentive for successfully meeting expectations at  7 to 10% of your base salary. The Bank offers additional performance pay (5%) for those who exceed expectations. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
• Flexible and comprehensive benefits so you can choose the level of health, dental disability and life and/or accident insurance coverage that meets your needs
• Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
• Indexed, defined-benefit pension

We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.