Network Security Architect

Responsibilities

• Own and govern the network-security architecture across assigned secure-network workstreams and global site deployments.
• Lead discovery and assessment of existing physical and logical networks, security platforms, connectivity, traffic flows, remote-access paths, cloud interfaces, operational dependencies, and architecture gaps.
• Define target-state architectures and reusable patterns for Site Vault, firewall platforms, third-party connectivity, Zero Trust, internet ingress/egress, WAF, cloud edge, and Secure Connected Shops.
• Create, review, approve, and maintain HLDs, LLDs, Visio diagrams, traffic-flow diagrams, bills of materials, migration approaches, implementation timelines, standards, and configuration requirements.
• Provide architecture oversight for Check Point, Palo Alto, Cisco, load balancers, Cloudflare WAF, Zscaler, CyberArk, AWS/Azure edge services, Nozomi, SIEM, CMDB, and ITSM integrations as applicable.
• Ensure designs align with approved customer architectures, cybersecurity policies, deployment processes, compliance boundaries, and operational-support requirements.
• Lead or participate in architecture and design reviews, documenting decisions, risks, assumptions, exceptions, dependencies, technical debt, and required remediation actions.
• Review proposed production changes and evaluate security, availability, resilience, performance, dependency, testing, rollback, and maintenance-window risks before implementation.
• Validate implementation against approved designs through configuration review, testing support, evidence checks, cutover assurance, post-implementation review, and as-built documentation.
• Provide cross-tower technical leadership for complex incidents, vulnerabilities, problems, migrations, platform lifecycle activities, and major changes requiring architecture analysis.
• Define reference architectures, guardrails, templates, playbooks, and standardized deployment patterns to support consistent execution across sites and delivery pods.
• Guide operational readiness, monitoring requirements, support-model alignment, knowledge transfer, SOP development, stabilization, and handover to L1/L2/L3 operations.
• Collaborate with network, firewall, cloud, endpoint, identity, application, SOC, OT, site, compliance, service-management, procurement, and vendor stakeholders.
• Identify opportunities for architecture simplification, automation, policy optimization, reliability improvement, and lifecycle modernization while preserving compliance and service continuity.

Requirements

• BACHELOR OF COMPUTER SCIENCE

Skills

• Proven experience defining enterprise network-security architectures across data centers, colocation facilities, points of presence, cloud, branch, third-party, internet edge, and industrial or manufacturing environments.
• Architecture experience across Check Point and Palo Alto firewalls, LAN switching, load balancing, WAF, secure remote access, Zero Trust/Zscaler, cloud ingress and egress, and OT network segmentation.
• Ability to lead discovery, current-state assessment, architecture-gap analysis, target-state design, design reviews, deployment governance, validation, stabilization, and handover to operations.
• Experience developing and approving HLDs, LLDs, network and security diagrams, traffic and data-flow diagrams, bills of materials, implementation roadmaps, migration strategies, architecture standards, and decision records.
• Strong knowledge of network segmentation, zones, routing, BGP/OSPF, NAT, VPN/IPsec, high availability, resilient design, secure management, DNS, certificates, reverse proxies, and application-delivery dependencies.
• Experience designing security patterns for Site Vault, firewall build and operations, third-party connectivity, Zero Trust, internet ingress/egress, WAF, cloud security, and Secure Connected Shops.
• Experience defining policy governance, firewall-rule assurance, access-control standards, configuration baselines, RBAC, least privilege, segregation of duties, and compliance boundaries.
• Experience reviewing architecture and changes for