Position Description
We are looking for an experienced Cloud Network Architect with deep Microsoft Azure networking expertise to join our Solution Architecture team. This role will provide specialized expertise across cloud, hybrid, and enterprise networking, helping design and support secure, resilient, scalable, and highly available infrastructure solutions.
The successful candidate will combine strong networking fundamentals with hands-on Azure experience and will be comfortable working across both architecture and implementation. Responsibilities will include developing solution designs, reviewing network and security configurations, providing technical guidance during implementation and migration activities, and troubleshooting complex connectivity, routing, DNS, firewall, WAF, TLS, load-balancing, and performance issues.
Azure is the primary cloud platform for this role. The position will also support connectivity across on-premises environments, Kubernetes platforms, third-party providers, partner networks, and other cloud environments. Familiarity with Oracle Cloud Infrastructure (OCI) is an asset, but deep OCI specialization is not required.
This is not a documentation-only architecture role. The Cloud Network Architect will work closely with architects, engineering, infrastructure, cybersecurity, application, vendor, carrier, and operational teams to translate business and technical requirements into practical network solutions and support their successful implementation.
The role will also contribute to architecture standards, reusable patterns, technical documentation, and the continued evolution of our cloud networking and infrastructure practices.
Your future duties and responsibilities
- Design secure, scalable, resilient, and supportable network architectures across Microsoft Azure, on-premises, and hybrid cloud environments.
- Translate application, security, availability, compliance, and business requirements into practical network solutions and detailed technical designs.
- Develop network architectures covering topology, traffic flow, routing, segmentation, DNS, ingress and egress, load balancing, firewall/WAF controls, and private connectivity.
- Provide hands-on technical guidance during implementation, migration, testing, production deployment, and complex troubleshooting activities.
- Review and troubleshoot network, firewall, WAF, DNS, routing, NAT, TLS, certificate, load-balancing, connectivity, and performance configurations and issues.
- Design and support multi-region, high-availability, disaster recovery, and secure hybrid connectivity solutions.
- Support connectivity between Azure, on-premises environments, Kubernetes platforms, OCI, third-party providers, partner networks, and cloud interconnection services.
- Collaborate with architecture, engineering, cybersecurity, application, infrastructure, vendor, carrier, and operational teams to deliver and support network solutions.
- Contribute to architecture reviews, technical standards, reusable patterns, implementation guidance, operational documentation, and Infrastructure as Code practices.
- Mentor technical team members and contribute to the continued development of cloud networking, security, and infrastructure practices.
Required Qualifications To Be Successful In This Role
- 7-10 years of experience in enterprise networking, cloud infrastructure, solution architecture, or related technical roles, including at least 3-5 years of practical experience with Azure networking and hybrid cloud environments.
- Strong networking fundamentals, including TCP/IP, subnetting, routing, switching, network segmentation, DNS, DHCP, NAT/SNAT, BGP, VPN technologies, and end-to-end traffic flow analysis.
- Strong hands-on experience with Azure networking technologies, including Virtual Networks, VNet peering, Network Security Groups, route tables, Azure Firewall, Application Gateway/WAF, Load Balancer, Front Door, Private Link/private endpoints, Azure DNS/Private DNS, ExpressRoute, VPN Gateway, NAT Gateway, and Network Watcher.
- Practical experience designing and troubleshooting hybrid connectivity, private connectivity, Layer 4 and Layer 7 load balancing, routing, DNS, HTTP/HTTPS, TLS, SNI, and certificates.
- Hands-on experience with enterprise firewall and Web Application Firewall technologies, including security policies, NAT, application publishing, inbound/outbound and east-west traffic controls, TLS termination, logging, and troubleshooting.
- Experience designing and supporting network redundancy, high availability, regional failover, disaster recovery, monitoring, and performance troubleshooting, including latency, packet loss, throughput, timeout, and connectivity issues.
- Practical knowledge of SD-WAN and enterprise connectivity concepts, including IPsec, BGP, underlay/overlay networking, dynamic path selection, traffic prioritization, automated failover, and cloud/private interconnection.
- Understanding of Azure Kubernetes Service (AKS) and Kubernetes networking concepts, including IP planning, Azure CNI, services, ingress/egress, internal load balancing, private clusters, network policies, DNS, routing, and workload connectivity.
- Intermediate working knowledge of Terraform and familiarity with Infrastructure as Code practices, Bicep, Git, YAML/JSON, reusable modules, state management, environment separation, and CI/CD pipelines such as Azure DevOps.
- Experience applying network security principles including zero trust, segmentation, least-privilege connectivity, secure administrative access, TLS/certificate management, logging, monitoring, auditing, and incident investigation.
Assets
- Hands-on experience with F5 Distributed Cloud, Fortinet FortiGate, Infoblox, or comparable enterprise networking, firewall, WAF, DNS, DHCP, and IPAM platforms.
- Experience with cloud interconnection and network service providers such as Equinix Fabric, Megaport, Console Connect, or comparable platforms.
- Experience coordinating network provisioning and troubleshooting with telecom carriers, internet service providers, cloud connectivity providers, and external network partners.
- Familiarity with OCI networking, including Virtual Cloud Networks, routing, security controls, gateways, load balancing, DNS, VPN/private connectivity, and Azure-to-OCI connectivity.
- Experience working in regulated or security-sensitive environments, including environments aligned with PCI DSS, SOC 2, or ISO 27001.
- Experience in banking, financial services, payments, or other highly available enterprise environments.
- Relevant Azure, networking, cloud, or security certifications.
Qualifications And Professional Skills
- Bachelor's degree in computer science, information technology, network engineering, or a related discipline, or equivalent practical experience.
- Demonstrated experience designing and supporting production network environments.
- Strong analytical and structured problem-solving skills, with the ability to trace end-to-end traffic flows and identify connectivity or performance issues.
- Ability to explain complex network and cloud concepts clearly to technical and non-technical stakeholders.
- Ability to communicate technical recommendations, dependencies, constraints, risks, and architectural trade-offs.
- Collaborative approach to working across architecture, engineering, cybersecurity, application, vendor, carrier, and operational teams.
- Ability to create clear architecture diagrams, traffic-flow diagrams, implementation guidance, and technical documentation.
- Willingness to participate in implementation, troubleshooting, incident reviews, mentoring, and continuous improvement activities.
CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $90,000 -$140,000. This role is an existing vacancy.
- OA1
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.
That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.
To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.
Come join our team - one of the largest IT and business consulting services firms in the world.
