IT Network Security Architect

• Serve as a security architecture advisor for enterprise infrastructure, network security, cloud connectivity, and cybersecurity technologies.
• Design, review, and enhance security architectures, ensuring alignment with business requirements, security standards, and risk management objectives.
• Develop and improve firewall, VPN, segmentation, remote access, and secure connectivity solutions across enterprise and hybrid environments.
• Partner with network, infrastructure, cloud, application, operations, and compliance teams to evaluate designs and recommend practical security improvements.
• Assess network architectures, firewall policies, access controls, routing paths, and connectivity models to reduce risk and strengthen security posture.
• Provide guidance on Zero Trust, MFA, identity-based access controls, least-privilege access, secure remote connectivity, and modern security architectures.
• Support infrastructure modernization, cloud initiatives, third-party integrations, and large-scale technology projects by providing security design oversight.
• Create and maintain security standards, architecture diagrams, risk assessments, technical recommendations, and implementation guidance while monitoring emerging threats and industry trends.

Requirements

• 8+ years of experience in cybersecurity, security architecture, network security, infrastructure security, or a related technical security role.
• Strong experience designing and supporting enterprise security architectures utilizing Cisco, Fortinet/FortiGate, and Palo Alto security technologies.
• Hands-on experience with Palo Alto and FortiGate firewalls, including security policy management, VPNs, NAT, SD-WAN, threat prevention, and centralized management platforms.
• Strong Cisco networking and security background, including routers, switches, ISE, ASA/Firepower, Secure Firewall, AnyConnect, Meraki, and related technologies.
• Deep understanding of network security concepts including firewalls, routing and switching, segmentation, VPNs, DMZs, remote access, access control policies, and secure connectivity.
• Experience implementing network segmentation strategies across enterprise, cloud, data center, operational technology, and distributed environments.
• Strong knowledge of cybersecurity frameworks and best practices including NIST, CIS Controls, ISO 27001, Zero Trust, identity management, vulnerability management, logging, monitoring, and incident response.
• Experience with cloud security, critical infrastructure or regulated environments, security tools such as SIEM, EDR/XDR, NAC, SASE, and vulnerability management platforms, along with strong documentation, communication, and stakeholder engagement skills.