Network Security Architect

Role Overview

Architecture & Design

• Design, document, and maintain secure network and system architectures aligned with business and security requirements.
• Develop and review network security blueprints, segmentation strategies, and data flow diagrams.
• Integrate security controls across enterprise infrastructure, including firewalls, VPNs, WAFs, and proxy solutions.

Implementation & Configuration

• Lead deployment and configuration of network security technologies (firewalls, routers, switches, WAFs, load balancers).
• Drive implementation of zero-trust architectures, network access control (NAC), and micro-segmentation.
• Collaborate with infrastructure and application teams to embed security throughout design and deployment phases.

Technology Evaluation & Innovation

• Evaluate emerging security technologies and recommend solutions to enhance network protection.
• Develop and maintain security architecture roadmaps aligned with organizational goals.

Security Compliance & Governance

• Ensure alignment with security frameworks and standards such as ISO 27001, NIST, and CIS.
• Support compliance with regulatory requirements (e.g., GDPR, PCI-DSS).
• Conduct network security assessments, audits, and gap analyses.
• Define and enforce network security standards and configuration baselines.

Leadership & Collaboration

• Provide technical leadership and mentorship to network and security engineers.
• Collaborate with enterprise architects, cloud teams, and DevOps to deliver integrated security solutions.

Key Skills & Competencies

• Strong analytical and problem-solving abilities.
• Deep understanding of modern cyber threats and attack vectors.
• Excellent communication skills, with the ability to explain technical concepts to diverse stakeholders.
• Strong documentation and leadership capabilities.

Qualifications & Experience

• 8–12 years of experience in network and security engineering, including at least 4 years in a senior role.
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Strong knowledge of networking protocols (TCP/IP, routing, VLANs, VPNs).
• Hands-on expertise with next-generation firewalls (e.g., Palo Alto, Fortinet, Check Point, Cisco ASA/Firepower).
• Experience with network policy management, QoS, packet shaping, and intrusion prevention systems.
• Exposure to cloud network security (Azure, GCP).
• Familiarity with Zero Trust, SD-WAN, and SASE architectures.

• Cloud Security Certifications

• Fortinet Certifications
• F5 Certification