IT Network Security Architect

About the role

Serve as a security architecture advisor for enterprise infrastructure, network security, cloud connectivity, and cybersecurity technologies. Design, review, and enhance security architectures, ensuring alignment with business requirements, security standards, and risk management objectives.

Responsibilities

• Develop and improve firewall, VPN, segmentation, remote access, and secure connectivity solutions across enterprise and hybrid environments.
• Partner with network, infrastructure, cloud, application, operations, and compliance teams to evaluate designs and recommend practical security improvements.
• Assess network architectures, firewall policies, access controls, routing paths, and connectivity models to reduce risk and strengthen security posture.
• Provide guidance on Zero Trust, MFA, identity-based access controls, least-privilege access, secure remote connectivity, and modern security architectures.
• Support infrastructure modernization, cloud initiatives, third-party integrations, and large-scale technology projects by providing security design oversight.
• Create and maintain security standards, architecture diagrams, risk assessments, technical recommendations, and implementation guidance while monitoring emerging threats and industry trends.

Requirements

• 8+ years of experience in cybersecurity, security architecture, network security, infrastructure security, or a related technical security role.
• Strong experience designing and supporting enterprise security architectures utilizing Cisco, Fortinet/FortiGate, and Palo Alto security technologies.
• Hands-on experience with Palo Alto and FortiGate firewalls, including security policy management, VPNs, NAT, SD-WAN, threat prevention, and centralized management platforms.
• Strong Cisco networking and security background, including routers, switches, ISE, ASA/Firepower, Secure Firewall, AnyConnect, Meraki, and related technologies.
• Deep understanding of network security concepts including firewalls, routing and switching, segmentation, VPNs, DMZs, remote access, access control policies, and secure connectivity.
• Experience implementing network segmentation strategies across enterprise, cloud, data center, operational technology, and distributed environments.
• Strong knowledge of cybersecurity frameworks and best practices including NIST, CIS Controls, ISO 27001, Zero Trust, identity management, vulnerability management, logging, monitoring, and incident response.
• Experience with cloud security, critical infrastructure or regulated environments, security tools such as SIEM, EDR/XDR, NAC, SASE, and vulnerability management platforms.
• Strong documentation, communication, and stakeholder engagement skills.

Qualifications

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply. California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/. Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Skills

N/A

Benefits

N/A

Pay

N/A

Schedule

N/A