At IMCO, our talent is among the best! IMCO offers a uniquely stimulating and rewarding environment where you can help build and drive organizational transformation, all while seeking to challenge yourself, learn, and grow your career.
Our culture is built on collaboration and passion, with a shared commitment to delivering lasting value to the clients we serve. Located in downtown Toronto, our vision is to be the partner of choice for Ontario’s public sector funds and to build a high-performing, value-driven asset management firm.
This job posting is for an existing vacancy. If you are ready to deliver best-in-class service and join a collaborative, motivated and fun team of professionals, IMCO offers the opportunity to do impactful work and broaden your expertise.
If you’re looking to use your expertise to drive strategic outcomes, we’d love to hear from you.
End-to-End Network Architecture & Infrastructure Evolution | Azure Hub-Spoke, Hybrid Connectivity & Cloud-Native Readiness
The Senior Network and Cloud Engineer, with deep expertise in on-premises and Azure cloud networking, Azure hybrid connectivity, and broad Azure resource configuration principles, will be responsible for leading the technical design, implementation, and evolution of IMCO’s network infrastructure. Working alongside the Cloud Architect Lead to align network initiatives with the broader cloud roadmap, this role will own the technical direction, standards, and execution of secure, scalable, and resilient network solutions across our Azure regions. The Engineer will drive end-to-end project delivery from discovery through deployment, establishing and enforcing best practices for network policy, routing, and security controls to ensure consistent, audit-ready infrastructure provisioning. This includes evaluating the current network landscape, collaborating with managed service providers on firewall operations and hybrid connectivity, identifying modernization opportunities, and proposing solutions that optimize cost, performance, and reliability. The role also requires producing comprehensive documentation, network diagrams, and technical specifications to maintain operational clarity and readiness across the organization.
As a Member of Our Team You Will be Responsible For:
- Lead the technical design and implementation of Azure network architecture, including hub-and-spoke topology, connectivity to partners, regional redundancy, and cross-region connectivity, aligning with the broader cloud roadmap defined with the Cloud Architect Lead.
- Define and enforce network engineering standards, routing strategies, UDRs, route tables, NSGs, and hybrid connectivity frameworks to ensure consistent, secure, and audit-ready infrastructure provisioning.
- Design, deploy, and maintain Azure Front Door and related global traffic management solutions, including Web Application Firewall (WAF) policies, SSL/TLS termination, DDoS protection, and performance optimization, ensuring secure, highly available, and globally optimized access to IMCO’s cloud-native applications.
- Collaborate with and oversee managed service providers on Azure, Palo Alto/PRISMA and Meraki network operations, site-to-site VPNs, BGP peering, route optimizations, and security control implementations, ensuring technical alignment, service quality, and successful project execution while developing long-term operational readiness models.
- Drive end-to-end network initiatives from requirements gathering and architecture design through vendor coordination, build-out, testing, rollout, and operationalization.
- Evaluate existing network architecture through performance analysis, routing reviews, and connectivity assessments, identifying bottlenecks or vulnerabilities and proposing modernization strategies that improve cost, performance, and reliability.
- Produce and maintain comprehensive documentation, including network topology diagrams, routing specifications, operational procedures, and transition planning artifacts, to ensure clarity and maintainability of systems for current and future teams.
- Monitor industry trends, emerging networking technologies, and evolving regulatory requirements to ensure cloud network solutions remain compliant, secure, and aligned with IMCO’s long-term infrastructure goals.
What do you need to succeed?
- A degree in Computer Science, Engineering, Network Technology, or a related technical field; equivalent combination of education and field experience will also be considered.
- Relevant cloud and networking certifications such as Microsoft Certified: Azure Network Engineer Associate (AZ-700), Palo Alto PCNSE/PCNSA, or equivalent are preferred.
- Minimum of 7 years’ hands-on experience designing and implementing enterprise-scale Azure networking and hybrid connectivity solutions, with a proven track record of delivering secure, scalable, and compliant network architectures in highly regulated environments such as financial services.
- Extensive expertise in Azure Virtual Networks, hub-and-spoke topology, UDRs, route tables, regional peering, and cross-region redundancy, including the ability to design, implement, and optimize complex routing and security policies.
- Practical experience with Azure Front Door, WAF, global traffic routing, and cloud-native application delivery networks, with the ability to configure, monitor, and optimize these services for security, performance, and high availability across multi-region environments.
- Strong background in hybrid connectivity frameworks, site-to-site IPsec VPNs, BGP peering, and secure remote access architectures, with experience evaluating and planning infrastructure transitions or cloud-native modernization initiatives.
- Strong background in access layer switch management and enterprise switching architecture, including hands-on experience designing, deploying, and maintaining switch stacks across office and DR sites. This includes configuration and optimization of VLANs, STP/RSTP, link aggregation, QoS, and secure network segmentation, as well as firmware lifecycle management, performance monitoring, and proactive troubleshooting to ensure high availability and resilient access layer operations.
- Demonstrated ability to oversee managed service providers and vendor teams, ensuring technical alignment, service quality, and successful project execution while developing long-term operational readiness and transition pathways.
- Proficient with Azure Network Watcher, NSGs, private endpoints, and cloud-native monitoring and alerting, with the skills to leverage these tools for performance analysis, troubleshooting, and capacity modeling.
- Strong grasp of network security hardening, compliance remediation, and structured change management processes, with experience integrating security controls and monitoring into every stage of the network lifecycle.
- Proficient in producing and maintaining detailed technical documentation, including network topology diagrams, routing specifications, operational procedures, and comprehensive technical designs that support cross-functional teams and maintain clarity for future stakeholders.
- Proven experience collaborating with business and technical architects, fostering a culture of knowledge sharing, technical excellence, and adherence to best practices in cloud networking, security, and operational governance.
- Strong analytical and communication skills, with the ability to translate complex business and connectivity requirements into practical technical solutions and to influence both technical and non-technical audiences.
- Hands-on knowledge of cloud-native networking services, automation frameworks, and infrastructure-as-code methodologies, with the ability to integrate these tools to streamline network provisioning, validation, and operational support.
- Commitment to ongoing professional development, demonstrated by relevant certifications and a proactive approach to monitoring emerging networking technologies, industry trends, and evolving regulatory standards to ensure network solutions remain innovative and compliant.
How to Apply: Interested candidates should submit their resume, cover letter, and a brief summary of a complex network or cloud project they have owned end-to-end.
The base salary range for this position is CAD $105,000.00 - $138,000.00. The placement within the range is determined by the range of market pay for the specific position, as well as the candidate's knowledge, skillset and experience relative to the requirements of the position and to internal peers. In addition to base salary, this position is eligible to participate in IMCO's annual incentive plan. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you with the specific details for this position, as well as the total rewards offering at IMCO including our comprehensive benefits package and defined benefit pension plan.
We thank all applicants for their interest. Only those selected for an interview will be contacted.
Our hybrid work model prioritizes an office-first approach, encouraging employees to make the most of our collaborative workspace at 16 York Street, Suite 2400, Toronto, ON M5J 0E6. This welcoming environment fosters teamwork, connection, and professional growth. While flexibility remains a key component of our model, we believe that regular in-office engagement enhances productivity and strengthens our culture. Our approach supports a fulfilling lifestyle that balances professional ambition with personal wellbeing.
IMCO is committed to providing accommodation for people with disabilities throughout the recruitment process. If you require support, please let us know and we will work with you to meet your needs. Artificial intelligence (AI) tools may be used to support parts of our recruitment process, such as screening and assessments. However, all hiring decisions are made by our recruitment team. Candidates being considered for this position will be required to undergo background screening.
