Senior Network and Cloud Engineer

Investment Management Corporation of Ontario (IMCO)•Toronto, ON

8d•CA$105,000 - CA$138,000•Hybrid

About The Position

The Senior Network and Cloud Engineer, with deep expertise in on-premises and Azure cloud networking, Azure hybrid connectivity, and broad Azure resource configuration principles, will be responsible for leading the technical design, implementation, and evolution of IMCO’s network infrastructure. Working alongside the Cloud Architect Lead to align network initiatives with the broader cloud roadmap, this role will own the technical direction, standards, and execution of secure, scalable, and resilient network solutions across our Azure regions. The Engineer will drive end-to-end project delivery from discovery through deployment, establishing and enforcing best practices for network policy, routing, and security controls to ensure consistent, audit-ready infrastructure provisioning. This includes evaluating the current network landscape, collaborating with managed service providers on firewall operations and hybrid connectivity, identifying modernization opportunities, and proposing solutions that optimize cost, performance, and reliability. The role also requires producing comprehensive documentation, network diagrams, and technical specifications to maintain operational clarity and readiness across the organization.

Requirements

A degree in Computer Science, Engineering, Network Technology, or a related technical field; equivalent combination of education and field experience will also be considered.
Minimum of 7 years’ hands-on experience designing and implementing enterprise-scale Azure networking and hybrid connectivity solutions, with a proven track record of delivering secure, scalable, and compliant network architectures in highly regulated environments such as financial services.
Extensive expertise in Azure Virtual Networks, hub-and-spoke topology, UDRs, route tables, regional peering, and cross-region redundancy, including the ability to design, implement, and optimize complex routing and security policies.
Practical experience with Azure Front Door, WAF, global traffic routing, and cloud-native application delivery networks, with the ability to configure, monitor, and optimize these services for security, performance, and high availability across multi-region environments.
Strong background in hybrid connectivity frameworks, site-to-site IPsec VPNs, BGP peering, and secure remote access architectures, with experience evaluating and planning infrastructure transitions or cloud-native modernization initiatives.
Strong background in access layer switch management and enterprise switching architecture, including hands-on experience designing, deploying, and maintaining switch stacks across office and DR sites. This includes configuration and optimization of VLANs, STP/RSTP, link aggregation, QoS, and secure network segmentation, as well as firmware lifecycle management, performance monitoring, and proactive troubleshooting to ensure high availability and resilient access layer operations.
Demonstrated ability to oversee managed service providers and vendor teams, ensuring technical alignment, service quality, and successful project execution while developing long-term operational readiness and transition pathways.
Proficient with Azure Network Watcher, NSGs, private endpoints, and cloud-native monitoring and alerting, with the skills to leverage these tools for performance analysis, troubleshooting, and capacity modeling.
Strong grasp of network security hardening, compliance remediation, and structured change management processes, with experience integrating security controls and monitoring into every stage of the network lifecycle.
Proficient in producing and maintaining detailed technical documentation, including network topology diagrams, routing specifications, operational procedures, and comprehensive technical designs that support cross-functional teams and maintain clarity for future stakeholders.
Proven experience collaborating with business and technical architects, fostering a culture of knowledge sharing, technical excellence, and adherence to best practices in cloud networking, security, and operational governance.
Strong analytical and communication skills, with the ability to translate complex business and connectivity requirements into practical technical solutions and to influence both technical and non-technical audiences.
Hands-on knowledge of cloud-native networking services, automation frameworks, and infrastructure-as-code methodologies, with the ability to integrate these tools to streamline network provisioning, validation, and operational support.
Commitment to ongoing professional development, demonstrated by relevant certifications and a proactive approach to monitoring emerging networking technologies, industry trends, and evolving regulatory standards to ensure network solutions remain innovative and compliant.

Nice To Haves

Relevant cloud and networking certifications such as Microsoft Certified: Azure Network Engineer Associate (AZ-700), Palo Alto PCNSE/PCNSA, or equivalent are preferred.

Responsibilities

Lead the technical design and implementation of Azure network architecture, including hub-and-spoke topology, connectivity to partners, regional redundancy, and cross-region connectivity, aligning with the broader cloud roadmap defined with the Cloud Architect Lead.
Define and enforce network engineering standards, routing strategies, UDRs, route tables, NSGs, and hybrid connectivity frameworks to ensure consistent, secure, and audit-ready infrastructure provisioning.
Design, deploy, and maintain Azure Front Door and related global traffic management solutions, including Web Application Firewall (WAF) policies, SSL/TLS termination, DDoS protection, and performance optimization, ensuring secure, highly available, and globally optimized access to IMCO’s cloud-native applications.
Collaborate with and oversee managed service providers on Azure, Palo Alto/PRISMA and Meraki network operations, site-to-site VPNs, BGP peering, route optimizations, and security control implementations, ensuring technical alignment, service quality, and successful project execution while developing long-term operational readiness models.
Drive end-to-end network initiatives from requirements gathering and architecture design through vendor coordination, build-out, testing, rollout, and operationalization.
Evaluate existing network architecture through performance analysis, routing reviews, and connectivity assessments, identifying bottlenecks or vulnerabilities and proposing modernization strategies that improve cost, performance, and reliability.
Produce and maintain comprehensive documentation, including network topology diagrams, routing specifications, operational procedures, and transition planning artifacts, to ensure clarity and maintainability of systems for current and future teams.
Monitor industry trends, emerging networking technologies, and evolving regulatory requirements to ensure cloud network solutions remain compliant, secure, and aligned with IMCO’s long-term infrastructure goals.