Network Security Architect

The key responsibilities of this position include development of network security design plans and the development of reference architectures and standards for secure networking across the enterprise. The position is responsible for understanding and interpreting global business and technical security requirements in order to apply advanced next generation firewalling, encryption, access control and intrusion prevention technologies for global consumption.

This includes participation in discovery, documentation, validation / refinement of forward-looking solutions (ex. Global Network Access Control and next-gen integrated Firewall and IPS strategy) while considering opportunities for re-use of standard solutions and technologies.

Responsibilities:

• Develops and communicates network security infrastructure design plans, future strategic and tactical plans to aid in decision making activities that affect key network environments and initiatives.
• Researches and recommends next generation network security technologies & products (ex. 802.1x port authentication, RADIUS, Application Firewalling, Intrusion Prevention Systems, etc.)
• Collaborates with suppliers, Storage, Hosting, Facilities, IT Security and Client Services towers on network security solutions for development of advanced services to meet overall protection requirements. Designs customized solutions as required to support Business objectives.
• Meets with vendors to discuss product strategy offerings, addresses technical issues/deficiencies and influences new products and services to meet growing and changing requirements.
• Indirectly leads Sr. Network Security Engineers in key initiatives and ensures high quality and timeliness of deliverables.

Requirements include:

• 5-10 years in high-availability, 24x7 enterprise environments
• Strong TCP/IP
• Securing firewalls (Palo Alto highly preferred in addition to others)
• Knowledge of routing protocols, access control, encryption, intrusion prevention, authentication and firewalling
• Firemon, SEIM, QRadar (operating these tools)
• Knowledge of PCI (Someone who has been through a security audit and provided artifacts)
• “Doers” not thinkers – patient, hard-working, sense of urgency

All your information will be kept confidential according to EEO guidelines.