Network Security Architect

The Network & Infrastructure Security Engineer is responsible for the administration, operation, and continuous improvement of the organization's network and infrastructure security environment. The primary focus of this role is the implementation, management, and optimization of firewalls, intrusion prevention systems (IPS), secure connectivity solutions, and enterprise security infrastructure.

The engineer will ensure the confidentiality, integrity, and availability of the organization's network infrastructure by implementing security controls, managing secure remote access, monitoring infrastructure security, and supporting incident response activities. The role works closely with Network Engineering, Infrastructure, Cloud, Security Operations, and Application teams to maintain a secure and resilient enterprise environment.

• Administer, configure, and maintain enterprise firewall platforms.
• Develop, implement, and optimize firewall security policies and rule sets.
• Review and approve firewall rule requests in accordance with security policies.
• Perform firewall rule recertification and periodic policy reviews.
• Troubleshoot firewall-related connectivity and security issues.
• Ensure high availability (HA) configurations and disaster recovery readiness.
• Support firewall upgrades, migrations, and lifecycle management.

• Implement and maintain enterprise network security controls.
• Administer Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS).
• Configure and maintain Network Access Control (NAC) solutions.
• Support secure network segmentation and micro-segmentation initiatives.
• Implement secure routing and switching practices.
• Monitor network traffic for anomalies and security threats.
• Perform network security assessments and recommend improvements.
• Maintain secure DNS, DHCP, and IP address management (DDI) services where applicable.

• Design, implement, and maintain secure remote access solutions.
• Administer site-to-site and remote access VPN technologies.
• Support Zero Trust Network Access (ZTNA) and Software-Defined Perimeter (SDP) solutions.
• Manage secure connectivity between on-premises, cloud, and third-party environments.
• Implement secure hybrid-cloud connectivity.
• Support certificate-based authentication and Public Key Infrastructure (PKI).

• Secure Windows and Linux server infrastructure.
• Implement infrastructure hardening standards and security baselines.
• Manage privileged administrative access to infrastructure components.
• Support identity integration with Microsoft Entra  Active Directory.
• Coordinate vulnerability remediation with infrastructure teams.
• Review infrastructure configurations against security standards.
• Support secure virtualization and hypervisor environments.

• Investigate network and infrastructure security alerts.
• Support incident response activities related to network attacks and infrastructure compromises.
• Analyze firewall, IPS, VPN, and infrastructure logs.
• Work with the SOC to investigate security events and recommend remediation actions.
• Participate in threat hunting activities related to network infrastructure.

• Support implementation of new network security technologies.
• Participate in infrastructure security architecture reviews.
• Assist in cloud network security implementation.
• Support network segmentation and Zero Trust initiatives.
• Perform proof-of-concept testing for new security technologies.

• Maintain network security standards and operational procedures.
• Ensure infrastructure security controls comply with organizational policies.
• Support internal and external security audits.
• Maintain network diagrams and security documentation.
• Prepare operational and security reports.
• Assist with disaster recovery and business continuity planning.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Network Engineering, or a related field.
• Minimum 5 years of experience in network security, infrastructure security, or cybersecurity engineering.
• Experience administering enterprise…