Senior Network Security Architect

Responsibilities

• Design and review secure network architectures across data centers, cloud platforms, hybrid environments, and third‑party connectivity solutions.
• Define and maintain network security standards, architecture patterns, and security requirements for enterprise technology platforms.
• Conduct architecture reviews for network transformation initiatives, cloud migrations, application integrations, and infrastructure modernization programs.
• Provide subject‑matter expertise in network segmentation, Zero Trust architectures, firewalls, secure remote access, DNS security, DDoS protection, and network access controls.
• Assess network security risks and develop practical mitigation strategies aligned with enterprise security requirements and regulatory obligations.
• Partner with engineering, cloud, infrastructure, and cybersecurity teams to integrate security controls into network services and platforms.
• Evaluate emerging network security technologies and industry trends to support future‑state architecture and technology roadmaps.

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 14 years or more of experience in network security, cybersecurity architecture, infrastructure security, cloud networking, or related technology discipline, with at least 7 years of hands‑on cybersecurity experience preferred.
• Demonstrated experience designing and implementing enterprise‑scale network security architectures in complex global environments.
• Deep understanding of network security technologies including firewalls, VPNs, proxies, IDS/IPS, DNS security, DDoS protection, network access control, and micro‑segmentation.
• Experience securing cloud networking environments across AWS, Azure, and/or Google Cloud Platform.
• Strong understanding of TCP/IP, routing, switching, load balancing, network protocols, encryption technologies, and secure communication architectures.
• Experience with network security assessments, architecture reviews, threat modeling, and risk‑based security analysis.
• Knowledge of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), software‑defined networking, and cloud‑native networking architectures.
• Professional certifications such as CISSP, CCSP, CCNP Security, PCNSE, Fortinet NSE, AWS Advanced Networking, Azure Network Engineer, or equivalent certifications are highly desirable.
• Experience with in financial services or other highly regulated industries is preferred.
• Experience supporting large‑scale network modernization, segmentation, cloud migration, or Zero Trust initiatives.
• Ability to work effectively with global engineering, infrastructure, cloud, and cybersecurity teams.