Capco Logo

Capco

Senior WAF Migration Architect

Posted An Hour Ago
Be an Early Applicant
Hybrid
Toronto, ON
Senior level
Hybrid
Toronto, ON
Senior level
Lead enterprise-scale WAF migrations to Cloudflare and Akamai, including current-state assessments, target architecture, security policies, traffic routing, DNS and CDN integration, application onboarding, migration waves, testing, rollback, cutover, and stabilization. Partner with security, network, cloud, application, and infrastructure teams to deliver secure, resilient, compliant, and high-performance architectures.
The summary above was generated by AI

Shape the architecture behind secure, resilient, enterprise-scale WAF migrations.

The Role

As a Senior WAF Migration Architect, you will lead the end-to-end architecture and migration of Web Application Firewall (WAF) capabilities to Cloudflare and Akamai. You will own the current-state assessment, target-state architecture, migration strategy, security policies, traffic routing, DNS and CDN integration, and application onboarding approach.

Working closely with security, network, cloud, application, and infrastructure teams, you will help deliver a secure and low-risk migration while ensuring the target platforms meet enterprise security, performance, availability, and compliance requirements.

What You’ll Do

  • Lead current-state assessments and define the target-state WAF architecture across Cloudflare and Akamai, including security policies, traffic routing, DNS, CDN integration, and application onboarding.
  • Define the end-to-end WAF migration strategy, including migration waves, technical dependencies, testing approaches, rollback strategies, and cutover requirements.
  • Establish WAF security architecture, policies, rules, and controls aligned with enterprise security, performance, availability, and compliance requirements.
  • Partner with security, network, cloud, application, and infrastructure teams to resolve architectural and technical dependencies throughout the migration.
  • Provide architectural oversight across migration execution, testing, cutover, and stabilization to support secure and reliable adoption of the target platforms.

What We’re Looking For

  • 12+ years of relevant experience across cybersecurity, network security, infrastructure, cloud, or application security, including significant experience designing enterprise WAF solutions.
  • Deep knowledge of WAF architecture and hands-on experience with Cloudflare and/or Akamai in complex enterprise environments.
  • Strong understanding of DNS, CDN technologies, HTTP/HTTPS, TLS, traffic routing, application delivery, web security, and associated integration patterns.
  • Experience defining enterprise-scale migration architectures, migration waves, testing strategies, rollback approaches, and technical dependency management.
  • Proven ability to work across security, network, cloud, application, and infrastructure teams and translate security and business requirements into practical technical architectures.

Bonus Points For

  • Experience leading large-scale WAF migration or modernization programmes involving Cloudflare and Akamai.
  • Knowledge of broader Cloudflare and Akamai security, CDN, application delivery, and traffic management capabilities.
  • Experience designing highly available and resilient security architectures within complex enterprise environments.
  • Familiarity with automation, APIs, infrastructure-as-code, and modern approaches to managing security infrastructure at scale.
  • Experience designing security architecture within financial services or another highly regulated environment.

Why Join Capco

  • Deliver high-impact technology solutions for Tier 1 financial institutions
  • Work in a collaborative, flat, and entrepreneurial consulting culture
  • Access continuous learning, training, and industry certifications
  • Be part of a team shaping the future of digital financial services
  • Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

Benefits

  • Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
  • Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
  • Virtual Health Care – Company-paid program available to all employees and their dependents/partners
  • Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
  • Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
  • New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
  • Wellness Support – Fitness reimbursement benefit to promote health and well-being
  • Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.


Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.


Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.                                                                                                   

Canada Pay Transparency
$153,000$197,000 CAD

Similar Jobs at Capco

An Hour Ago
Hybrid
Senior level
Senior level
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Deliver enterprise WAF migrations to Cloudflare and/or Akamai, including application onboarding, security policy implementation, DNS and traffic-routing changes, testing, troubleshooting, cutovers, and post-migration stabilization. Collaborate with architecture, security, network, and application teams to validate functionality, security, and performance while resolving migration and production issues.
Top Skills: AkamaiAPIsApplication DeliveryCloudflareDnsHttp/HttpsInfrastructure As CodeScriptingTlsTraffic RoutingWaf
3 Hours Ago
Hybrid
Senior level
Senior level
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Design, implement, monitor, and enhance network security and DLP controls across enterprise networks, endpoints, email, cloud, and web environments. Investigate security events, incidents, vulnerabilities, data leakage, and policy violations; perform root-cause analysis; coordinate remediation; and advise clients on network resilience, data protection, and practical security improvements. Collaborate with infrastructure, cloud, IAM, risk, compliance, privacy, and business teams in complex financial services environments.
Top Skills: AWSCcnaCcnpCiamCiscoData ClassificationData Loss Prevention (Dlp)DhcpDnsFirewallsFortinetGCPIdentity And Access Management (Iam)Information ProtectionJuniperAzureNetwork MonitoringNetwork SegmentationPalo Alto NetworksPrivileged AccessRoutingSwitchingTcp/IpVlansVpnsZero Trust
3 Hours Ago
Hybrid
Senior level
Senior level
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Build and operate reliable AWS cloud platforms for critical financial services. Responsibilities include site reliability engineering, DevOps automation, infrastructure as code, CI/CD pipeline management, production deployments, observability, outage troubleshooting, platform security, performance improvement, and 24x7 on-call support. The role partners with engineering teams to design, implement, and maintain highly available services while advancing automation and continuous delivery practices.
Top Skills: Api GatewayApmAuto Scaling GroupsAWSChefCi/CdCloudFormationDatadogDockerEc2EcsEksGitGitlabJenkinsKubernetesLambdaLinuxPowershellRdsS3SplunkTerraformWindows

What you need to know about the Vancouver Tech Scene

Raincouver, Vancity, The Big Smoke — Vancouver is known by many names, and in recent years, it has gained a reputation as a growing hub for both tech and sustainability. Renowned for its natural beauty, the city has become a magnet for professionals eager to create environmental solutions, and with an emphasis on clean technology, renewable energy and environmental innovation, it's attracted companies across various industries, all working toward a shared goal: advancing clean technology.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account