Senior Network Security Architect (SNSA)
Location: Hybrid/Onsite (as required)
Company Overview
We’re partnering with a large, enterprise organization recognized for its commitment to secure, reliable services and a modern, cloud-forward technology strategy. The company operates at scale across complex environments and values collaboration, continuous improvement, and operational excellence. Joining this team means shaping an enterprise perimeter security program that protects critical platforms customers depend on every day—without naming the organization directly, per confidentiality.
Role Summary
As the Senior Network Perimeter Security Architect, you will lead the design, implementation, and ongoing governance of the enterprise’s perimeter security architecture across on-prem, virtual, and cloud environments. You’ll be the technical authority for next-gen firewalls, secure access, segmentation/zero trust, and cloud-native controls, ensuring scalability, resilience, and compliance.
Working closely with security engineering, IT infrastructure, cloud operations, SOC, and application security, you’ll evaluate and deploy technologies, guide standards and patterns, and reduce risk while improving operational efficiency.
Key Responsibilities
- Architect & maintain perimeter security controls: next-generation firewalls, secure web gateways, VPNs/proxies, DDoS mitigation, IPS/IDS, and SSL decryption.
- Lead architecture reviews and risk assessments for new network and cloud deployments; establish secure patterns for on-prem, hybrid, and multi-cloud.
- Drive zero trust and segmentation strategies, including micro-segmentation (e.g., VMware NSX) and secure network design principles.
- Evaluate, pilot (POCs), and deploy new security tools and capabilities; define standards, policies, and hardening baselines for perimeter defense.
- Collaborate cross-functionally with network engineering, cloud ops, SOC, and AppSec; advise on secure application and infrastructure configurations.
- Respond to and analyze incidents involving perimeter technologies; proactively remediate risks and performance bottlenecks.
- Support compliance initiatives (e.g., PCI DSS, HIPAA, ISO 27001, NIST) and produce/maintain documentation, diagrams, and runbooks.
- Mentor junior engineers and provide technical leadership across projects; define KPIs/OKRs and metrics to demonstrate control effectiveness.
Key Requirements
- Experience: 7–10 years in IT and security operations with 5–7 years in an architecture or lead role focused on cyber/perimeter network security.
- Firewalls & Threat Prevention: Deep expertise with enterprise-class platforms (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki, Check Point, Juniper); experience managing large fleets (200+ firewalls).
- Network Core: Strong knowledge of routing/switching, BGP, SD-WAN security, IPSec/SSL VPNs, VLANs, DNS, DHCP, RADIUS, Wi-Fi; packet capture/analysis (e.g., NetFlow, IP SLA).
- Secure Access & Detection: NAC (e.g., Cisco ISE, 5+ years or equivalent), IPS/IDS, SSL decryption, and secure remote access solutions.
- Cloud Security: Hands-on with AWS/Azure/Google Cloud Platform controls (e.g., security groups, WAFs, transit gateways), ZTNA (e.g., Zscaler), and hybrid architectures.
- Segmentation & Virtualization: Experience with VMware NSX (NSX-T/NSX-v) for micro-segmentation and distributed firewalling.
- Automation & Tooling: Familiarity with Ansible, Terraform, Kubernetes, Puppet; scripting in Python/Bash/JavaScript; enterprise monitoring (e.g., SolarWinds Orion).
- Frameworks & IAM: Knowledge of NIST (incl. 800-144), CIS, CSA-CCM, ISO 27001/27017/27040; IAM and federation protocols (SAML, OAuth, OpenID, SCIM).
- Preferred Certifications: CISSP, CCSP, CCNP Security, PCNSE (or similar).
- Education: Bachelor’s in Cybersecurity, Information Technology, Computer Science, Information Systems (or equivalent experience).
- Work Style: Ability to lead high-impact initiatives, work cross-functionally, document clearly, and support off-hours work for projects/incidents as needed.
Nice to Have
- Experience implementing and managing WAFs and endpoint protection (e.g., via SCCM).
- Familiarity with major SaaS ecosystems (e.g., Salesforce, Workday, Microsoft 365, SAP).
- Experience developing QoS/Multicast strategies and using packet analysis tools.
Why This Role
You’ll define and evolve an enterprise perimeter security posture that protects mission-critical services, partnering with senior leaders to reduce risk and enable the business. If you enjoy solving complex problems at scale and leading from both the whiteboard and the keyboard, this is a chance to make a measurable impact.
