DMZ Infrastructure Architect

Position: DMZ Infrastructure Architect

Location: Remote

Hiring Mode: 6+ Months Contract

Job Description:

The DMZ Infrastructure Architect is responsible for designing secure, scalable, and resilient demilitarized zone environments primarily within public cloud platforms. This role focuses on architecture, design standards, and security controls rather than production implementation. The individual will play a critical role in enabling secure communication between internal enterprise systems and external facing applications while aligning with security best practices and regulatory requirements.

This position requires deep expertise in cloud networking and security architecture, with hands on design experience creating DMZ environments from the ground up in large scale enterprise settings. Limited laboratory or proof of concept work may be required to validate designs and patterns.

Responsibilities:

• Design cloud based DMZ architectures that securely separate internal networks from external access points while supporting business and application requirements.
• Define network segmentation strategies, routing models, and access control policies to reduce attack surfaces and enforce least privilege principles.
• Architect firewall, proxy, load balancing, VPN, and intrusion detection and prevention solutions aligned with enterprise and regulatory standards.
• Develop secure ingress and egress traffic patterns for internet facing and partner integrated applications.
• Collaborate with security, cloud, network, and application teams to ensure DMZ designs integrate cleanly with broader enterprise architecture.
• Evaluate security risks and provide architectural guidance to mitigate vulnerabilities in cloud DMZ environments.
• Support incident response activities by providing architectural insight during investigations of DMZ related security events.
• Create and maintain detailed architecture diagrams, design documentation, standards, and operational guidance.
• Leverage automation and infrastructure as code concepts to improve consistency, repeatability, and operational efficiency in DMZ designs.
• Stay current on emerging cloud security services, network security trends, and zero trust architecture principles. Qualifications:
• Bachelor s degree in Computer Science, Information Technology, or a related field or equivalent professional experience.
• Five or more years of experience designing and managing enterprise DMZ and network security architectures.
• Demonstrated experience designing cloud based DMZ environments within public cloud platforms such as AWS or Azure.
• Strong expertise with enterprise firewall platforms such as Palo Alto, Fortinet, Cisco, or Check Point.
• In depth knowledge of networking concepts and protocols including TCP IP, BGP, OSPF, DNS, HTTP and HTTPS, and SSL TLS.
• Experience designing and integrating load balancers, proxies, and VPN solutions.
• Strong understanding of zero trust security models, microsegmentation, and cloud native security controls.
• Proven analytical and problem solving skills with a proactive security mindset.
• Ability to communicate complex architectural concepts clearly to technical and non technical stakeholders.

Tools and Technologies:

• Public cloud networking and security services in AWS and Azure
• Enterprise firewall platforms
• Cloud load balancing and proxy services
• VPN and secure connectivity technologies
• Network monitoring and logging solutions
• Scripting and automation tools for design validation and standardization