" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSolution architect - Infrastructure (Cloud \u0026amp; Network)\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20644\"\u003e IT \u0026amp; Digital \u003c/li\u003e \u003cli data-id=\"20645\"\u003e Architect \u003c/li\u003e \u003cli data-id=\"20646\"\u003e Auckland Central \u003c/li\u003e \u003cli data-id=\"20647\"\u003e Contract \u0026amp; Temporary \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 6/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003e12 month contract\u003c/li\u003e \u003cli\u003eAuckland or Christchurch location\u003c/li\u003e \u003cli\u003eFlexible start date\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eJob Title:\u003c/strong\u003e Solution Architect \u0026ndash; Cloud Infrastructure \u0026amp; Network Security\u0026nbsp;\u003cbr\u003e\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eAbout the Role:\u003c/strong\u003e \u003cbr\u003e\u003cbr\u003eAn exciting opportunity has arisen for two delivery-embedded Solution Architects to join the Infrastructure \u0026amp; Cloud Services team. You will operate directly inside delivery squads, acting as an enabler to design and embed reusable patterns, guardrails, and implementation-ready backlog items.\u003cbr\u003e We are actively seeking specialists across two core domains:\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eStream A: Cloud Infrastructure \u0026amp; Database Security:\u003c/strong\u003e Championing secure-by-design architectures across hybrid multi-cloud (GCP, AWS, Azure), DBaaS, Kubernetes/serverless platforms, CNAPP, and DevSecOps pipelines.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eStream B: Network Security \u0026amp; Zero Trust (ZTNA):\u003c/strong\u003e Driving enterprise Dynamic Trust, micro-segmentation, SD-WAN, next-gen perimeter/cloud firewalls, and automated NetSec observability.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eKey Responsibilities:\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eEmbed \u0026amp; Enable:\u003c/strong\u003e Work inside cross-functional delivery squads to ensure infrastructure, cloud platforms, and network connectivity are secure-by-design and compliant-by-default.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003ePattern \u0026amp; Guardrail Design:\u003c/strong\u003e Author and review architecture blueprints, Architecture Decision Records (ADRs), guardrails, and delivery-ready backlog items; defend designs at architecture review forums.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eHands-On Validation:\u003c/strong\u003e Test controls and configurations in live accounts/sandboxes before publishing patterns, using infrastructure and policy as code (Terraform, CI/CD pipelines).\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eRegulatory \u0026amp; Resilience Mapping:\u003c/strong\u003e Translate regulatory standards (such as APRA CPS 230/234, RBNZ) and operational resilience requirements into actionable controls and measurable evidence.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eRisk \u0026amp; Trade-off Advisory:\u003c/strong\u003e Articulate technical risk, control gaps, and compensating measures in clear, non-dogmatic language that engineering, cyber, and business stakeholders can execute against.\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eKey Skills \u0026amp; Experience:\u003c/strong\u003e\u003cbr\u003e\u003cbr\u003e\u003cstrong\u003eStream A: (Cloud Infra, Platforms \u0026amp; DB):\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eMulti-Cloud Expertise:\u003c/strong\u003e Proven design and delivery across GCP, AWS, Azure, covering account/project vending, policy baselines, and identity. Main preference is GCP.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eData \u0026amp; Platform Engineering:\u003c/strong\u003e Deep familiarity with managed databases (RDS, Cloud SQL, Spanner, Azure SQL), database encryption/masking, and container platforms (EKS, GKE, Cloud Run).\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eDevSecOps \u0026amp; Posture Management:\u003c/strong\u003e Hands-on exposure to pipeline security (IaC scanning, GitHub Advanced Security) and CNAPP operating models (vulnerability burn-down, exception governance).\u003c/li\u003e \u003cli\u003eRelevant cloud credentials are highly regarded (e.g., AWS Solutions Architect Pro/Security, Google Cloud Architect/Security, Azure Solutions Architect/Security).\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eStream B: (Network Security, ZTNA \u0026amp; Segmentation):\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003e\u003cstrong\u003eDynamic Trust \u0026amp; ZTNA:\u003c/strong\u003e Hands-on design and enterprise rollout of Zero Trust Network Access policies, application publishing, and identity-aware access controls.\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eMicro-Segmentation \u0026amp; Firewalls:\u003c/strong\u003e Proven experience delivering segmentation (e.g., Illumio), application dependency mapping, and modern firewall policy lifecycles (Check Point, cloud-native firewalls).\u003c/li\u003e \u003cli\u003e\u003cstrong\u003eNetwork Ecosystems:\u003c/strong\u003e Practical knowledge across SD-WAN, proxy/DLP (Netskope), DNS security (Akamai, Route 53), WAF/F5 BIG-IP, and NetSec telemetry into SIEM.\u003c/li\u003e \u003cli\u003eRelevant networking certifications are advantageous (e.g., AWS Advanced Networking, Azure Network Engineer, Check Point CCSE, or vendor equivalents).\u003c/li\u003e \u003c/ul\u003e Get in touch with Miguel Montanez for a confidential chat at 0211242749 or miguel@consult.co.nz \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4484347\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "