Network Security Architect

About the Role

We are seeking a highly skilled and motivated Network Security Architect to join our team and play a pivotal role in safeguarding our organization’s digital infrastructure. In this critical position, you will be responsible for designing, implementing, and maintaining robust network and infrastructure security solutions that protect our enterprise against evolving cyber threats. Your expertise will be instrumental in ensuring the confidentiality, integrity, and availability of our network environments while fostering collaboration across multiple technical teams. This role demands a proactive approach to security, a deep understanding of enterprise networking, and a commitment to continuous improvement in our security posture.

Key Responsibilities

As a Network Security Architect, you will be entrusted with a diverse range of responsibilities that span the entire spectrum of network and infrastructure security. Your core duties will include:

• Firewall Administration and Optimization:
  • Administer, configure, and maintain enterprise-grade firewall platforms to ensure robust perimeter security.
  • Develop, implement, and optimize firewall security policies and rule sets in alignment with organizational security policies and best practices.
  • Review, approve, and recertify firewall rule requests to maintain a secure and efficient access control environment.
  • Troubleshoot complex firewall-related connectivity and security issues to minimize downtime and security risks.
  • Ensure high availability (HA) configurations and disaster recovery readiness for critical firewall infrastructure.
  • Lead firewall upgrades, migrations, and lifecycle management initiatives to maintain optimal performance and security.
• Network Security Implementation and Monitoring:
  • Deploy and maintain enterprise network security controls, including Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS).
  • Configure and manage Network Access Control (NAC) solutions to enforce endpoint security policies.
  • Support secure network segmentation and micro-segmentation initiatives to reduce attack surfaces and enhance threat containment.
  • Implement secure routing and switching practices to protect data in transit and prevent unauthorized access.
  • Monitor network traffic for anomalies, security threats, and potential breaches using advanced security tools and analytics.
  • Conduct regular network security assessments and recommend strategic improvements to mitigate risks.
  • Maintain secure DNS, DHCP, and IP address management (DDI) services to ensure the integrity of network services.
• Secure Connectivity and Hybrid Cloud Integration:
  • Design, implement, and maintain secure remote access solutions, including VPN technologies and Zero Trust Network Access (ZTNA).
  • Administer site-to-site and remote access VPN solutions to enable secure connectivity for distributed teams and partners.
  • Support the implementation of Software-Defined Perimeter (SDP) solutions to enhance secure access controls.
  • Manage secure connectivity between on-premises, cloud, and third-party environments to ensure seamless and protected operations.
  • Implement secure hybrid-cloud connectivity solutions to facilitate safe data transfer and application access across diverse environments.
  • Oversee certificate-based authentication and Public Key Infrastructure (PKI) to establish trusted communication channels.
• Infrastructure Security and Compliance:
  • Secure Windows and Linux server infrastructure through the implementation of hardening standards and security baselines.
  • Manage privileged administrative access to infrastructure components to prevent unauthorized escalation of privileges.
  • Support identity integration with Microsoft Entra ID and Active Directory to enforce consistent authentication and authorization policies.
  • Collaborate with infrastructure teams to coordinate vulnerability remediation and ensure compliance with security standards.
  • Review infrastructure configurations against established security benchmarks to identify and address vulnerabilities.
  • Support secure virtualization and hypervisor environments to protect virtualized workloads from emerging threats.
• Security Operations and Incident Response:
  • Investigate network and infrastructure security alerts to identify and mitigate potential threats in real time.
  • Support incident response activities related to network attacks, infrastructure compromises, and security breaches.
  • Analyze logs from firewalls, IPS, VPN, and other infrastructure components to detect and respond to security incidents.
  • Work closely with the Security Operations Center (SOC) to investigate security events and recommend remediation actions.
  • Participate in proactive threat hunting activities to identify and neutralize advanced persistent threats targeting network infrastructure.
• Strategic Security Projects and Innovation:
  • Support the implementation of new network security technologies and solutions to enhance our defensive capabilities.
  Participate in infrastructure security architecture reviews to ensure alignment with evolving security frameworks and compliance requirements.
  • Assist in the implementation of cloud network security measures to protect cloud-native and hybrid environments.
  • Support network segmentation and Zero Trust initiatives to modernize our security architecture and reduce risk exposure.
  • Conduct proof-of-concept testing for emerging security technologies to evaluate their effectiveness and integration potential.
• Compliance, Documentation, and Governance:
  • Maintain comprehensive network security standards and operational procedures to ensure consistency and compliance.
  • Ensure that all infrastructure security controls adhere to organizational policies, industry regulations, and best practices.
  • Support internal and external security audits by providing documentation, evidence, and remediation support.
  • Maintain accurate network diagrams, security documentation, and operational records to facilitate transparency and accountability.
  • Prepare detailed operational and security reports to communicate risks, incidents, and compliance status to stakeholders.
  • Assist with disaster recovery and business continuity planning to ensure resilience in the face of security incidents or outages.

Required Qualifications

To excel in this role, you must possess a blend of technical expertise, analytical skills, and a proactive mindset. The ideal candidate will meet the following qualifications:

• A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• Proven experience in network security architecture, firewall administration, and enterprise security infrastructure management.
• In-depth knowledge of firewall platforms (e.g., Palo Alto, Cisco ASA, Fortinet, Check Point) and their configuration best practices.
• Hands-on experience with Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), and Network Access Control (NAC) solutions.
• Familiarity with secure network segmentation, Zero Trust principles, and hybrid-cloud connectivity solutions.
• Strong understanding of secure routing, switching, and DNS/DHCP/IPAM management.
• Experience with certificate-based authentication, Public Key Infrastructure (PKI), and identity management solutions (e.g., Microsoft Entra ID, Active Directory).
• Proficiency in server hardening, infrastructure security baselines, and vulnerability remediation processes.
• Experience supporting security operations, incident response, and threat hunting activities.
• Excellent analytical and problem-solving skills with the ability to troubleshoot complex security issues.
• Strong communication and collaboration skills to work effectively with cross-functional teams, including Network Engineering, Infrastructure, Cloud, and Security Operations.
• Relevant industry certifications such as CISSP, CISM, CCNP Security, PCNSE, or equivalent are highly desirable.