Senior WAF Migration Architect

Location: Canada - Toronto

Department: Tech & Engineering

Shape the architecture behind secure, resilient, enterprise-scale WAF migrations.

The Role

As a Senior WAF Migration Architect, you will lead the end-to-end architecture and migration of Web Application Firewall (WAF) capabilities to Cloudflare and Akamai. You will own the current-state assessment, target-state architecture, migration strategy, security policies, traffic routing, DNS and CDN integration, and application onboarding approach.

Working closely with security, network, cloud, application, and infrastructure teams, you will help deliver a secure and low-risk migration while ensuring the target platforms meet enterprise security, performance, availability, and compliance requirements.

What You’ll Do

• Lead current-state assessments and define the target-state WAF architecture across Cloudflare and Akamai, including security policies, traffic routing, DNS, CDN integration, and application onboarding.
• Define the end-to-end WAF migration strategy, including migration waves, technical dependencies, testing approaches, rollback strategies, and cutover requirements.
• Establish WAF security architecture, policies, rules, and controls aligned with enterprise security, performance, availability, and compliance requirements.
• Partner with security, network, cloud, application, and infrastructure teams to resolve architectural and technical dependencies throughout the migration.
• Provide architectural oversight across migration execution, testing, cutover, and stabilization to support secure and reliable adoption of the target platforms.

What We’re Looking For

• 12+ years of relevant experience across cybersecurity, network security, infrastructure, cloud, or application security, including significant experience designing enterprise WAF solutions.
• Deep knowledge of WAF architecture and hands-on experience with Cloudflare and/or Akamai in complex enterprise environments.
• Strong understanding of DNS, CDN technologies, HTTP/HTTPS, TLS, traffic routing, application delivery, web security, and associated integration patterns.
• Experience defining enterprise-scale migration architectures, migration waves, testing strategies, rollback approaches, and technical dependency management.
• Proven ability to work across security, network, cloud, application, and infrastructure teams and translate security and business requirements into practical technical architectures.

Bonus Points For

• Experience leading large-scale WAF migration or modernization programmes involving Cloudflare and Akamai.
• Knowledge of broader Cloudflare and Akamai security, CDN, application delivery, and traffic management capabilities.
• Experience designing highly available and resilient security architectures within complex enterprise environments.
• Familiarity with automation, APIs, infrastructure-as-code, and modern approaches to managing security infrastructure at scale.
• Experience designing security architecture within financial services or another highly regulated environment.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions
• Work in a collaborative, flat, and entrepreneurial consulting culture
• Access continuous learning, training, and industry certifications
• Be part of a team shaping the future of digital financial services
• Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

Benefits

• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
• Virtual Health Care – Company-paid program available to all employees and their dependents/partners
• Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
• Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
• New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
• Wellness Support – Fitness reimbursement benefit to promote health and well-being
• Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.