Shape the architecture behind secure, resilient, enterprise-scale WAF migrations.
The Role
As a Senior WAF Migration Architect, you will lead the end-to-end architecture and migration of Web Application Firewall (WAF) capabilities to Cloudflare and Akamai. You will own the current-state assessment, target-state architecture, migration strategy, security policies, traffic routing, DNS and CDN integration, and application onboarding approach.
Working closely with security, network, cloud, application, and infrastructure teams, you will help deliver a secure and low-risk migration while ensuring the target platforms meet enterprise security, performance, availability, and compliance requirements.
What You’ll Do
- Lead current-state assessments and define the target-state WAF architecture across Cloudflare and Akamai, including security policies, traffic routing, DNS, CDN integration, and application onboarding.
- Define the end-to-end WAF migration strategy, including migration waves, technical dependencies, testing approaches, rollback strategies, and cutover requirements.
- Establish WAF security architecture, policies, rules, and controls aligned with enterprise security, performance, availability, and compliance requirements.
- Partner with security, network, cloud, application, and infrastructure teams to resolve architectural and technical dependencies throughout the migration.
- Provide architectural oversight across migration execution, testing, cutover, and stabilization to support secure and reliable adoption of the target platforms.
What We’re Looking For
- 12+ years of relevant experience across cybersecurity, network security, infrastructure, cloud, or application security, including significant experience designing enterprise WAF solutions.
- Deep knowledge of WAF architecture and hands-on experience with Cloudflare and/or Akamai in complex enterprise environments.
- Strong understanding of DNS, CDN technologies, HTTP/HTTPS, TLS, traffic routing, application delivery, web security, and associated integration patterns.
- Experience defining enterprise-scale migration architectures, migration waves, testing strategies, rollback approaches, and technical dependency management.
- Proven ability to work across security, network, cloud, application, and infrastructure teams and translate security and business requirements into practical technical architectures.
Bonus Points For
- Experience leading large-scale WAF migration or modernization programmes involving Cloudflare and Akamai.
- Knowledge of broader Cloudflare and Akamai security, CDN, application delivery, and traffic management capabilities.
- Experience designing highly available and resilient security architectures within complex enterprise environments.
- Familiarity with automation, APIs, infrastructure-as-code, and modern approaches to managing security infrastructure at scale.
- Experience designing security architecture within financial services or another highly regulated environment.
Why Join Capco
- Deliver high-impact technology solutions for Tier 1 financial institutions
- Work in a collaborative, flat, and entrepreneurial consulting culture
- Access continuous learning, training, and industry certifications
- Be part of a team shaping the future of digital financial services
- Help shape the future of digital transformation across FS & Energy.
We offer a competitive, people-first benefits package designed to support every aspect of your life:
Benefits
- Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
- Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
- Virtual Health Care – Company-paid program available to all employees and their dependents/partners
- Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
- Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
- New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
- Wellness Support – Fitness reimbursement benefit to promote health and well-being
- Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.
Inclusion at Capco
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
Use of Artificial Intelligence in Talent Acquisition
At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
Why This Role Is Open
We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.
Skills Required
- 12+ years of relevant experience across cybersecurity, network security, infrastructure, cloud, or application security
- Significant experience designing enterprise WAF solutions
- Deep knowledge of WAF architecture
- Hands-on experience with Cloudflare and/or Akamai in complex enterprise environments
- Strong understanding of DNS, CDN technologies, HTTP/HTTPS, TLS, traffic routing, application delivery, web security, and integration patterns
- Experience defining enterprise-scale migration architectures, migration waves, testing strategies, rollback approaches, and technical dependency management
- Ability to work across security, network, cloud, application, and infrastructure teams and translate requirements into technical architectures
- Experience leading large-scale WAF migration or modernization programs involving Cloudflare and Akamai
- Knowledge of Cloudflare and Akamai security, CDN, application delivery, and traffic management capabilities
- Experience designing highly available and resilient security architectures in complex enterprise environments
- Familiarity with automation, APIs, infrastructure as code, and managing security infrastructure at scale
- Experience designing security architecture within financial services or another highly regulated environment
What the Team is Saying
Capco Compensation & Benefits Highlights
-
Healthcare Strength — Health, dental, and vision coverage in the U.S. are characterized as strong, with good coverage and favorable costs. Mental health resources and broader wellbeing programs are also emphasized as part of a comprehensive package.
-
Leave & Time Off Breadth — PTO and paid holidays are described as generous, with multiple mentions of strong vacation allowances. While client work can affect usage, the underlying entitlement is presented as solid.
-
Parental & Family Support — Company materials highlight enhanced family-friendly policies, including substantial maternity and paternity leave. Flexibility and return-to-work support reinforce a family-oriented approach.
Capco Insights
What We Do
Capco, a Wipro company, is a global management and technology consultancy specializing in driving transformation in the energy and financial services industries. Capco operates at the intersection of business and technology by combining innovative thinking with unrivalled industry knowledge to fast-track digital initiatives for banking and payments, capital markets, wealth and asset management, insurance, and the energy sector. Capco’s cutting edge ingenuity is brought to life through its award-winning Be Yourself At Work culture and diverse talent. TRUSTED ADVISORS - Our collaborative and entrepreneurial approach position us as trusted long-term partners to our clients. DEEP EXPERTISE - Clients look to us for clear guidance, proven expertise, and the support they need to set their companies up for success. DISRUPTIVE SOLUTIONS- We do not provide off -the-shelf answers to clients’ challenges. Instead, we work in close collaboration to understand the issues, and craft disruptive, bespoke solutions. ACCOUNTABILITY AND OWNERSHIP - We recognize every client has distinct needs and expectations, and we take ownership and accountability for the solutions we design, build, and deliver.
Why Work With Us
We support and encourage an inclusive culture, entrepreneurial outlook and independent thinking. Capco is not about organizational charts and rigid hierarchies – we want all employees to feel that Capco is their firm to own and run. We believe diversity powers innovation. Be Yourself At Work (#BYAW) is an integral and underlying part of our culture
Gallery
Capco Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
