Network:
Cisco Workload, Cisco Secure Workload, Cisco Tetration, Zero-trust microsegmentation
Security Architect – Zero Trust / Cisco Secure Workload
We are seeking an experienced Network Security Architect to support a major Zero Trust architecture implementation for a high-end financial services environment. This position is not traditional steady-state NOC work but is centered around high-impact weekend cutovers, Zero Trust policy enforcement, application dependency mapping, and real-time troubleshooting.
Responsibilities
Cisco Workload, Cisco Secure Workload, Cisco Tetration, Zero-trust microsegmentation
- Execute readiness checks before scheduled cutovers and policy-enforcement windows.
- Validate configurations, dependencies, risks, and rollback procedures prior to go-live.
- Lead and support Zero Trust policy changes and network cutovers during scheduled maintenance windows.
- Perform application dependency mapping using Cisco Secure Workload (CSW).
- Use dependency data to support policy design, cutover planning, and risk assessment.
- Perform post-change validation of network functionality and security-policy enforcement.
- Troubleshoot complex issues in real time during live cutover events.
- Execute rollback procedures when necessary to protect service availability.
- Document readiness assessments, implementation results, and post-event findings.
- Communicate technical status, risks, and issues clearly to technical and business stakeholders.
- Maintain accurate project and time-tracking documentation.
Requirements
Required Qualifications
Cisco Workload, Cisco Secure Workload, Cisco Tetration, Zero-trust microsegmentation
- 3+ years of hands-on experience designing, operating, and troubleshooting Zero Trust data-center security environments.
- Strong experience with technologies such as Microsegmentation, Next-Generation Firewalls, Network Access Control, Layer 3–7 security technologies.
- In-depth understanding of data-center networking protocols and principles.
- CCNP Route/Switch, CCNP Security, or equivalent demonstrated technical experience.
- Strong understanding of network-security concepts and architecture.
- Ability to troubleshoot complex network and security issues during high-pressure production events.
- Ability to communicate technical status and risk effectively to non-technical stakeholders.
- Ability to work a Wednesday–Sunday or Thursday–Monday schedule supporting weekend cutovers.
- U.S. citizenship and continental U.S. residency.
- Ability to successfully complete the required Tier II-Credit Check Enhanced federal background investigation and pre-employment drug screening.
- Strong documentation and time-management discipline.
Highly Preferred
Cisco Workload, Cisco Secure Workload, Cisco Tetration, Zero-trust microsegmentation
- 3+ years of hands-on Cisco Secure Workload (CSW) experience.
- Cisco Application Centric Infrastructure (ACI) experience.
- Network/security automation, scripting, or orchestration experience.
- Advanced understanding of security protocols and architecture.
- Experience managing Cisco TAC escalations through resolution.
- Experience gathering and analyzing diagnostic evidence independently.
- Previous experience supporting financial services or other highly regulated environments.
- Previous federal background investigation or Public Trust experience.
Schedule & Engagement
This is a full-time permanent position, not a fixed-term contract. The weekend cutover schedule is expected after which the schedule is expected to transition toward standard business hours. The position will operate as part of a broader technical team, with two architects supporting the weekend rotation—one primarily focused on Cisco Secure Workload and the counterpart focused on Cisco ACI.Cisco Workload, Cisco Secure Workload, Cisco Tetration, Zero-trust microsegmentation.
Never miss an opportunity! Create an alert based on the job you applied for.
