Network Security Architect

Job Details

This position is a 1-year assignment, with potential for extension based on performance and budget. Standard work hours apply, but the role requires supporting meetings in Eastern Time Zone (EST). The position supports a critical migration initiative moving key applications and workloads to the AWS public cloud.

Responsibilities

• Collaborate with application and infrastructure teams to gather and analyze network security requirements including connectivity, allowed ports, protocols, and data flows.
• Translate application requirements into detailed and actionable network security policies and firewall rules.
• Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.
• Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.
• Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.
• Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.
• Support troubleshooting and optimization of existing cloud network security configurations.

Requirements

• High School Diploma is Required. Bachelor’s degree is preferred.
• 5+ years’ experience in network security architecture or senior engineering, with a focus on AWS cloud environments.
• AWS Public Cloud experience is required.
• Background in financial services, banking or card services.
• Strong understanding of network security controls: firewalls (Palo Alto experience), Security Groups, VPN, and layered defense models.
• Proven ability to translate application connectivity needs into firewall rule sets and network security designs.
• Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
• Experience working alongside application teams in a collaborative Agile or DevSecOps environment.

Qualifications

• High School Diploma is Required. Bachelor’s degree is preferred.
• 5+ years’ experience in network security architecture or senior engineering, with a focus on AWS cloud environments.
• AWS Public Cloud experience is required.
• Background in financial services, banking or card services.
• Strong understanding of network security controls: firewalls (Palo Alto experience), Security Groups, VPN, and layered defense models.
• Proven ability to translate application connectivity needs into firewall rule sets and network security designs.
• Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
• Experience working alongside application teams in a collaborative Agile or DevSecOps environment.