Senior Network Security Architect

DXC Technology is seeking a Senior Network Security Architect to own the network security architecture for a major greenfield campus transformation programme.

Working under the central design authority, you will design security across multiple physically separated networks, covering perimeter and data centre protection, segmentation, Zero Trust access, secure connectivity and operational technology (OT) environments.

You will translate complex security requirements into practical architecture, govern implementation quality and support the transition to managed operations.

• Own the layered, multi-vendor firewall architecture across perimeter and data centre boundaries.
• Define network segmentation, micro-segmentation and Zero Trust designs across physically separated networks.
• Establish security reference designs, technical standards and firewall policy governance.
• Collaborate with network, infrastructure and cybersecurity architects to resolve design dependencies.
• Evaluate technology options and assure security, performance, availability and resilience.

• Design site-to-site and remote-access VPN solutions and SD-WAN security integration.
• Define network access control using 802.1X, device profiling, posture assessment and guest/BYOD onboarding.
• Design secure out-of-basis management, including dedicated management VRFs, bastion access, MFA and session recording.
• Incorporate secure time synchronisation and controlled administrative access.

• Design web application firewall, load-balancing and SSL inspection capabilities.
• Define inline secure web gateway controls and layered DDoS mitigation.
• Establish IDS/IPS, threat prevention and sandboxing requirements.
• Ensure application protection integrates with the wider network security architecture.
• Design OT security aligned with IEC 62443 principles.
• Define zone and conduit segmentation and controls for air-gapped environments.
• Incorporate unidirectional gateways and data diodes where required.
• Coordinate secure connectivity and information-flow requirements with relevant architecture teams.

• Define vulnerability and patch remediation approaches for network and security devices.
• Integrate network security logs and events with SIEM, NDR and SOC platforms.
• Establish centralised firewall management, monitoring and rule-governance requirements.
• Support operational readiness and handover to NOC and security operations teams for 24/7 support.

• Guide security engineers and review detailed designs and implementation deliverables.
• Govern build quality against approved architecture and security standards.
• Resolve complex technical issues across a multi-vendor delivery environment.
• Communicate architecture decisions, risks and dependencies clearly to programme stakeholders.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent professional experience.
• Typically 7+ years of relevant industry experience
  , including at least 3 years in a network security architecture or technical leadership role
  .
• Strong hands-on architecture knowledge across:
• Palo Alto Networks NGFW and Panorama
  , including SSL decryption, URL filtering, threat prevention and Wild Fire.
• Fortinet Forti Gate, Forti Manager and Forti Analyzer
  .
• F5 BIG-IP Advanced WAF and LTM
  , including application delivery and DDoS protection.
• Cisco ISE
  , including 802.1X, posture assessment and device profiling.
• Cisco Secure Workload and Secure Network Analytics
  .
• Experience designing segmentation, micro-segmentation, Zero Trust and secure access controls.
• Knowledge of OT security, IEC 62443, air-gapped networks and data diode architectures.
• Strong understanding of VPN/IPSec, SD-WAN security, NAT, routing and Layer 2–7 troubleshooting.
• Experience integrating security devices with SIEM, syslog/CEF and NDR platforms.
• Knowledge of secure-by-design practices and vulnerability management.
• Palo Alto PCNSE and/or Fortinet NSE 7 or above certification, or a relevant current equivalent
  .
• Strong problem-solving, delivery coordination and stakeholder communication skills.
• Professional proficiency in English.

• Experience designing security for large campus, government, defence or critical infrastructure environments.
• Experience governing multi-vendor security…