Network Security Architect

Candidate must have hands-on AWS experience. Azure or GCP knowledge is a bonus but AWS is required.

• VPC & Subnets — Design public/private subnets, route tables, internet gateway, NAT gateway

• EC2 — Launch and configure instances, assign ENIs, Elastic IPs, IAM roles, Auto Scaling

• Virtual Firewall on EC2 — Deploy Cisco FTDv, Palo Alto VM-Series, or FortiGate as EC2 instances

• Virtual Router on EC2 — Deploy software routers (Cisco CSR 1000V / VyOS), BGP peering in AWS

• Connectivity — Direct Connect, Site-to-Site VPN, Transit Gateway for hybrid and multi-site

• Security — Security Groups, NACLs, AWS Network Firewall, VPC Flow Logs, CloudTrail

Candidate should be able to discuss these standards in an interview — not implement them from scratch.

IEC 62443: Industrial cybersecurity standard — security zones, conduits, and security levels

NIST CSF: Identify, Protect, Detect, Respond, Recover — risk-based security framework

ISO / IEC 27001: Information security management system (ISMS) — how security is governed

Purdue Model: Layered industrial network model — why OT/IT segmentation is designed in levels

NERC CIP: Power grid cybersecurity compliance — awareness is fine for energy sector projects

• Experience — 10 to 12 years in network engineering

• Ownership —

• Architect secure OT/IT integration models aligned to IEC 62443

• Represent OT network architecture in customer, regulator, and executive discussions

• Drive architecture for multi-site, multi-region deployments

Has owned design and implementation decisions — not just followed instructions

• Leadership — Can review team designs, mentor engineers, and drive technical direction along with hands-on demonstration of core skills mentioned above

• Communication — Comfortable speaking to executives, customers, and compliance teams

• Certifications: CCNP

]• Certifications (Good-to-have) — CCIE, AWS Certified Advanced Networking, AWS Solutions Architect, CISSP

• Any OT / SCADA exposure — even at project or client level

• Azure or GCP networking — as an addition to AWS

• Infrastructure as Code — Terraform, CloudFormation, or Ansible for network automation