Senior Network Security Architect

Define and maintain the enterprise network security architecture vision, standards, and multi-year roadmap.

Develop reference architectures, design standards, and technical governance processes.

Lead strategic initiatives involving Zero Trust, SASE/SSE, cloud security, SD-WAN, segmentation, and network modernization.

Evaluate emerging technologies and recommend adoption strategies aligned with business and cybersecurity objectives.

Act as the technical authority for network security architecture decisions across the enterprise.

Architect and govern global network security solutions, including: Next-Generation Firewalls (Palo Alto, Fortinet, Check Point) Secure Service Edge (SSE/SASE) Zero Trust Network Access (ZTNA) Secure Web Gateway (SWG) Data Loss Prevention (DLP) DNS Security Web Application Firewall (WAF) DDoS Protection Network Detection & Response (NDR)

Next-Generation Firewalls (Palo Alto, Fortinet, Check Point)

Secure Service Edge (SSE/SASE)

Zero Trust Network Access (ZTNA)

Secure Web Gateway (SWG)

Data Loss Prevention (DLP)

DNS Security

Web Application Firewall (WAF)

DDoS Protection

Network Detection & Response (NDR)

Establish standards for segmentation, micro-segmentation, and policy enforcement.

Ensure consistent security controls across on-premises, cloud, and SaaS environments.

Design secure connectivity patterns for Azure, AWS, and hybrid cloud environments.

Architect cloud-native security controls and connectivity frameworks.

Govern ExpressRoute, Direct Connect, cloud firewalls, cloud networking, and secure interconnectivity.

Develop secure access models for applications, services, partners, and third-party integrations.

Define and maintain secure network architectures for manufacturing facilities, laboratories, and operational technology environments.

Drive IT/OT segmentation aligned with ISA-95, Purdue Model, NIST CSF, and IEC 62443 standards.

Design secure remote access, monitoring, and management solutions for manufacturing operations.

Partner with factory engineering and cybersecurity teams to identify and mitigate operational risks.

Lead architecture reviews and approve High-Level Designs (HLDs) and Low-Level Designs (LLDs).

Chair technical design reviews and architecture governance boards.

Mentor engineers and architects on network security best practices and emerging technologies.

Establish engineering standards and drive design consistency across regions and business units.

Ensure architecture compliance with: NIST Cybersecurity Framework NIST 800-53 CIS Critical Security Controls ISO 27001 IEC 62443 PCI DSS

NIST Cybersecurity Framework

NIST 800-53

CIS Critical Security Controls

ISO 27001

IEC 62443

PCI DSS

Conduct architecture risk assessments and threat modeling exercises.

Support major cyber incident investigations and post-incident architecture improvements.

Partner with Security Operations, SOC, ISRM, and Audit teams to continuously strengthen security posture.

Drive adoption of Infrastructure-as-Code (IaC), APIs, and security automation.

Lead AI-driven operational efficiency initiatives within network and security domains.

Develop architectural frameworks for telemetry, observability, and predictive analytics.

Promote standardization and simplification to reduce operational complexity and risk.

Develop business cases, TCO analyses, and strategic investment recommendations.

Lead vendor evaluations, proof-of-concepts, and technology selection initiatives.

Manage strategic vendor relationships and influence future product capabilities.

Support licensing, contract renewals, and budget planning activities.

Recognized subject matter expert and technical leader.

Influences executive, business, and technical stakeholders across organizational boundaries.

Drives enterprise-wide architectural decisions and technology strategy.

Balances security, operational excellence, business agility, and cost optimization.

Mentors senior engineers and architects while fostering innovation and engineering excellence.

CISSP

CCIE Enterprise Infrastructure/Security

CCNP Enterprise

Palo Alto PCNSE

Azure Security Engineer Associate

AWS Security Specialty

CCSP

Zscaler Certified Architect