Required Skills & Experience
- 7–10+ years of relevant enterprise networking and cybersecurity experience
- 5+ years in network security architecture, lead engineering, or equivalent design accountability.
- Demonstrated experience architecting multi-site enterprise NGFW environments, preferably Palo Alto, including centralized policy governance, routing, VPN, HA, inspection, and logging.
- Strong understanding of TCP/IP, BGP, OSPF, NAT, DNS, DHCP, IPSec/SSL VPN, network segmentation, and SD-WAN security integration.
- Hands-on architectural experience with Zero Trust, ZTNA, cloud perimeter controls, and secure hybrid connectivity; ability to assess Zscaler ZIA/ZPA designs.
- Experience producing HLD/LLD, security architecture standards, risk assessments, implementation guidance, and resilient design validation.
- Ability to communicate complex technical tradeoffs to leadership and work across Cybersecurity governance and Infrastructure operations
Nice to Have Skills & Experience
- Experience with Fortinet, Cisco Secure Firewall, Check Point, and multi-vendor firewall migrations or rationalization.
- Deep familiarity with Azure network security, Private Link, ExpressRoute, Azure Firewall, and AWS/GCP equivalents.
- Experience with Cisco SD-WAN, Zscaler ZIA/ZPA, Cisco ISE/NAC, NSX/vDefend, web application firewalls, and application delivery/security integration.
- Automation experience with Terraform, Ansible, Python, REST APIs, Git, and CI/CD; familiarity with security telemetry and SIEM integrations.
- Experience with SolarWinds, Splunk, ThousandEyes, Wireshark, NetFlow, or similar diagnostics and observability platforms.
- Knowledge of NIST, CIS Controls, ISO 27001, PCI DSS and other applicable frameworks; experience with vendor/managed service governance.
- Bachelor’s degree in Cybersecurity, Computer Science, IT or equivalent experience; relevant certifications such as CISSP, CCSP, CCNP Security, PCNSE, or comparable credentials.
Job Description
Seeking a Senior Network Perimeter Security Architect to lead the strategy, design, and modernization of enterprise network security across data centers, branch locations, hybrid cloud, and remote access environments. This role will define scalable, resilient security architectures and technical standards across next-generation firewalls, Zero Trust, segmentation, SASE/SSE, secure connectivity, and cloud perimeter controls. The architect will design and oversee Palo Alto and Fortinet firewall environments, Zscaler ZIA/ZPA and ZTNA solutions, Cisco SD-WAN integrations, secure remote access, and hybrid cloud networking across Azure, AWS, and GCP. Responsibilities include establishing security design patterns and governance, leading architecture and risk reviews, supporting firewall lifecycle and platform rationalization, and ensuring high availability, disaster recovery, and secure partner connectivity. The role will also help drive automation through Terraform, Ansible, Python, REST APIs, and Git while partnering closely with Cybersecurity, Network Engineering, Cloud Engineering, Applications, Operations, Architecture, and managed service providers. This individual will provide senior-level technical guidance during complex incidents, maintain architecture standards and documentation, mentor engineers, and ensure solutions transition effectively into operational support.