Senior Network Designer

We are seeking an experienced Senior Network Designer to provide end-to-end network architecture and design expertise across large-scale enterprise modernization initiatives. In this role, you will be responsible for defining technical roadmaps, designing secure WAN and cloud connectivity architectures, and guiding complex multi-cloud and hybrid integrations across on-premises data centers, AWS, and Microsoft Azure environments. Leveraging automation-first practices and AIOps frameworks, you will design transit routing, enforce Zero Trust and SASE security principles, integrate robust firewall architectures, and lead the technical transition from current-state topologies to scalable, future-ready enterprise network solutions.

Location: Toronto, ON (Hybrid – Up to 3 days onsite across GTHA offices, subject to manager's discretion)

Duration: 10-month contract

Advantages
End-to-End Modernization Leadership: Drive full-lifecycle WAN and multi-cloud transformations from strategy to operational deployment.

Hybrid & Multi-Cloud Scope: Architect complex connectivity across AWS Direct Connect, Azure ExpressRoute, and transit topologies.

Automation & AIOps Focus: Hands-on leadership implementing automation-first solutions that deliver measurable operational efficiency.

Flexible Hybrid Model: Balance focused remote work with onsite collaboration in the Greater Toronto and Hamilton Area.

Responsibilities
Lead the end-to-end network architecture lifecycle from strategic definition through migration, transition architectures, and operational enablement.

Design and implement large-scale WAN architectures, including MPLS-to-SD-WAN transformations, traffic engineering, QoS policies, and routing protocols (BGP, OSPF, IS-IS).

Architect secure hybrid and multi-cloud connectivity connecting on-premises data centers with AWS and Microsoft Azure using Direct Connect, ExpressRoute, Transit Gateways, and Virtual WAN topologies.

Embed modern security controls into network designs using Zero Trust frameworks, SASE principles, micro-segmentation, and enterprise firewall architectures (such as Check Point Maestro, policy architecture, HA, and VPNs).

Implement network automation and AIOps solutions to streamline provisioning, configuration management, compliance auditing, incident response, and performance monitoring.

Develop detailed, high-quality network architecture blueprints, technical roadmaps, topology diagrams, transition plans, and configuration specifications.

Provide technical leadership on identity-aware network access and segmentation, including access control and deployment models using Cisco Identity Services Engine (ISE).

Collaborate with executive leadership, technical engineering teams, and external vendor partners to present design options, address architecture dependencies, and drive consensus.

Qualifications
End-to-End Architecture Delivery: Proven track record leading the full architecture lifecycle—from current-state assessment and future-state design to migration planning and transition execution (Strictly Required).

WAN Architecture & Transformation: 10+ years of experience designing and operating large-scale enterprise/provider WANs, routing protocols (BGP, OSPF, IS-IS), MPLS QoS, and leading MPLS-to-SD-WAN transformations (Strictly Required).

Hybrid & Multi-Cloud Connectivity: Demonstrated experience designing enterprise cloud connectivity spanning AWS and Azure, utilizing AWS Direct Connect, Azure ExpressRoute, Transit Gateways, and transit routing patterns (Strictly Required).

Secure Architecture (SASE & Zero Trust): Strong expertise applying Zero Trust architecture, SASE principles, enterprise segmentation, and firewall architectures (with preference for Check Point technologies, VPN design, and HA) (Strictly Required).

Network Automation & AIOps: Demonstrated leadership in deploying network automation and AI-driven operations that delivered measurable efficiencies in provisioning, configuration management, or incident handling (Strictly Required).

Communication & Stakeholder Presentation: Exceptional verbal and written communication skills with proven ability to present complex architectural strategies to executive stakeholders and technical teams alike (Strictly Required).

Nice-to-Have Assets:
Prior network architecture or design experience within a public sector or equivalent large-scale enterprise environment.

Hands-on familiarity with Cisco Identity Services Engine (ISE) deployment design and Network Detection and Response (NDR) solutions.

Telecommunications industry or service provider networking background.

Familiarity with public sector privacy, data governance, and compliance regulations.

Summary
If you're interested in the "Senior Network Designer" role based in Toronto, we encourage you to apply online at www.randstad.ca.

Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.