Required Skills & Experience
Active CCIE Security certification (mandatory, no substitutions). 10+ years of network and network security experience. 5+ years leading network security architecture, assessment, or consulting engagements.
Deep expertise with Cisco networking and security technologies, including:
Cisco Secure Firewall / Firepower Cisco ASA Cisco ISE Cisco TrustSec
IOS / IOS XE
VPN technologies Enterprise routing and switching Strong experience assessing and designing large-scale enterprise network security environments.
Hands-on experience with network segmentation using:
VLANs VRFs ACLs Firewalls Security zones Identity-based access controls Microsegmentation strategies Experience designing secure hybrid cloud and data center architectures. Ability to analyze network configurations, firewall rules, routing tables, traffic flows, and architecture diagrams. Experience creating architecture diagrams, assessment reports, technical documentation, and implementation roadmaps. Strong stakeholder management, workshop facilitation, and executive presentation skills. Ability to work independently as the sole technical lead.
Nice to Have Skills & Experience
Experience supporting public utilities, critical infrastructure, power, water/wastewater, or regulated environments. Experience working in environments with both IT and operational technology (OT) dependencies.
Knowledge of:
NIST Cybersecurity Framework NIST SP 800-207 (Zero Trust Architecture) CIS Controls
Experience with:
Palo Alto Networks Fortinet Cloud-native firewalls SD-WAN
SASE / ZTNA
DDoS protection platforms DNS security solutions Network Access Control (NAC) Workload microsegmentation technologies Experience developing migration strategies, implementation estimates, and network modernization roadmaps.
Job Description
The Senior Network Security Architect will serve as the sole technical lead for a network security assessment and reference architecture engagement for a major U.S. public utility. This individual will assess the current network environment, identify security and segmentation gaps, and develop a target-state architecture and implementation roadmap that can be executed by the client's internal network team.
Day-to-Day Responsibilities Lead discovery sessions, workshops, interviews, and technical reviews with cybersecurity, network, infrastructure, cloud, and operations teams. Assess enterprise WAN/LAN, data centers, cloud connectivity, internet edge, partner connections, remote access, VPNs, routing, switching, and firewall environments. Analyze existing network segmentation, trust boundaries, security zones, ACLs, VRFs, firewalls, and identity-based controls. Identify lateral movement risks, excessive network access, segmentation gaps, and architectural weaknesses. Develop a target-state network security and segmentation architecture aligned to Zero Trust principles. Create trust-zone models, secure access patterns, management-plane security standards, and east-west/north-south traffic control strategies. Produce architecture diagrams, design documentation, findings reports, and executive presentations. Build a phased implementation roadmap including quick wins, dependencies, transition states, and prioritized initiatives. Facilitate stakeholder alignment and present recommendations to both executive and technical audiences. Provide knowledge transfer to internal network and security teams.