Security Architect- Cybersecurity and Network Security

Job Summary

Experienced Security Architect with 10-15+ years of cybersecurity and network security experience, including 5+ years in SASE/SSE, Zero Trust, cloud security, and enterprise security transformations. Responsible for leading the architecture, design, and technical governance of SSE solutions, ensuring alignment with business, security, compliance, and operational requirements. Provides technical leadership throughout design, implementation, migration, and transition phases.

Roles & Responsibilities

Lead architecture, design, and deployment strategy for SSE platforms, including SWG, ZTNA, Secure Browser, DEM, URL Filtering, and Threat Prevention.

Conduct discovery workshops and assess current-state network, security, identity, and application architecture.

Develop High-Level Design (HLD) and Low-Level Design (LLD) documents.

Define architecture standards, security controls, and implementation best practices.

Design traffic steering, service connection, routing, authentication, and policy frameworks.

Provide technical leadership during implementation, migration, testing, and rollout activities.

Review and validate security policies, user access models, segmentation strategies, and compliance requirements.

Lead technical risk assessments and mitigation planning.

Support UAT planning, design validation, and production readiness reviews.

Provide governance and oversight during cutover and hypercare phases.

Drive knowledge transfer and transition to operational support teams.

Educational Qualification

Bachelor’s degree in computer science, Information Technology, Engineering, Cybersecurity, or related field.

Master's degree preferred

Technical Skills

SSE/SASE Platforms (Palo Alto Prisma Access, Zscaler, Netskope, Cisco SSE or equivalent)

Secure Web Gateway (SWG)

Zero Trust Network Access (ZTNA)

Identity & Access Management (SSO, MFA, Conditional Access)

Cloud Security (AWS, Azure, Google Cloud Platform)

Network Security and Routing Concepts

VPN Technologies and Traffic Steering

SIEM and Security Integrations

Threat Prevention, URL Filtering, SSL Inspection

Security Architecture and Enterprise Design

Preferred Certifications

CISSP

CCSP

PCNSE / Palo Alto Prisma Access

Zscaler Certified Architect

CCIE Security / CCNP Security

Azure Security Engineer or equivalent