Senior Network Security Architect

Who We Are Looking For

We are looking for a Senior Network Security Architect. You will be responsible for designing, reviewing, and governing network security architectures across on‑premises, cloud, hybrid, and third‑party environments. You will work closely with infrastructure, cloud, engineering, cybersecurity, and business teams to ensure network security controls are integrated into enterprise technology solutions and aligned with the firm’s security standards and risk management objectives.

The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm’s infrastructure, applications, cloud platforms, and data. As cyber threats continue to target network infrastructure and connectivity layers, this role is responsible for ensuring network architectures are secure, resilient, scalable, and capable of supporting the firm’s global business operations.

• Design and review secure network architectures across data centers, cloud platforms, hybrid environments, and third‑party connectivity solutions.
• Define and maintain network security standards, architecture patterns, and security requirements for enterprise technology platforms.
• Conduct architecture reviews for network transformation initiatives, cloud migrations, application integrations, and infrastructure modernization programs.
• Provide subject matter expertise in network segmentation, Zero Trust architectures, firewalls, secure remote access, DNS security, DDoS protection, and network access controls.
• Assess network security risks and develop practical mitigation strategies aligned with enterprise security requirements and regulatory obligations.
• Partner with engineering, cloud, infrastructure, and cybersecurity teams to integrate security controls into network services and platforms.
• Evaluate emerging network security technologies and industry trends to support future‑state architecture and technology roadmaps.

These skills will help you succeed in this role.

• Deep expertise in network security architecture, network segmentation, Zero Trust principles, and secure connectivity patterns.
• Strong understanding of modern enterprise networking, cloud networking, and hybrid‑cloud security architectures.
• Experience with firewalls, IDS/IPS, secure web gateways, DNS security, network access control, micro‑segmentation, and remote access technologies.
• Strong analytical, problem‑solving, and risk assessment skills with the ability to translate security requirements into scalable architecture solutions.
• Strong communication and stakeholder management skills with the ability to collaborate across architecture, engineering, cloud, and business teams.
• Experience securing cloud platforms such as AWS, Azure, or Google Cloud.

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 14 years or more of experience in network security, cybersecurity architecture, infrastructure security, cloud networking, or related technology discipline, with at least 7 years of hands‑on cybersecurity experience preferred.
• Demonstrated experience designing and implementing enterprise‑scale network security architectures in complex global environments.
• Deep understanding of network security technologies including firewalls, VPNs, proxies, IDS/IPS, DNS security, DDoS protection, network access control, and micro‑segmentation.
• Experience securing cloud networking environments across AWS, Azure, and/or Google Cloud Platform.
• Strong understanding of TCP/IP, routing, switching, load balancing, network protocols, encryption technologies, and secure communication architectures.
• Experience with network security assessments, architecture reviews, threat modeling, and risk‑based security analysis.
• Knowledge of Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), software‑defined networking, and cloud‑native networking architectures.
• Professional certifications such as CISSP, CCSP, CCNP Security, PCNSE, Fortinet NSE, AWS Advanced Networking, Azure Network Engineer,…