Network & Security Architecture

Role Purpose

The Network & Security Architect is responsible for designing governing and assuring secure scalable and resilient network and security architectures across on-premises cloud hybrid and edge environments. This role acts as the design authority and trusted advisor ensuring solutions align with business objectives regulatory requirements and operational standards.

Key Responsibilities

Network & Security Architecture

Design end-to-end network and security solutions across LAN WAN WLAN SD-WAN data centers cloud internet edge DMZ and remote access environments.
Develop secure architecture patterns including network segmentation Zero Trust secure inter-zone communication high availability redundancy and failover.
Create architecture diagrams reference architectures and detailed design documentation.

Security Technology Architecture

Architect and standardize enterprise security technologies including NGFWs IDS/IPS VPNs NAC Secure Web Gateways and DDoS protection.
Evaluate and integrate new security technologies.
Ensure security controls are layered auditable and aligned to enterprise standards.

Governance & Standards

Define and maintain network and security architecture standards design principles and approved technology stacks.
Review designs from application cloud and SI/MSP teams.
Ensure compliance with security policies regulatory requirements and risk frameworks.

Risk Management & Threat Modeling

Conduct architecture-level risk assessments for new services cloud migrations and partner integrations.
Lead threat modeling and defense-in-depth reviews.
Ensure security risks are mitigated through design and architecture decisions.

Cloud & Zero Trust Architecture

Design secure networking solutions across AWS Azure and GCP.
Define hybrid connectivity SaaS access and Zero Trust networking models.
Integrate cloud solutions with enterprise security controls and identity-aware access patterns.

Managed Services & Solution Assurance

Act as the client-side design authority for SI/MSP-managed environments.
Review and approve solution designs and implementations.
Ensure operational readiness SLA compliance and prevention of non-standard technology deployments.

Resilience & Incident Support

Provide architectural guidance during major incidents security events and root cause investigations.
Design resilient solutions supporting rapid recovery fault isolation and reduced impact during outages.
Required Skills & Experience

Technical Skills

Strong expertise in enterprise networking routing switching segmentation and network security architectures.
Experience with Firewalls IDS/IPS VPNs Zero Trust and identity-aware networking.
Hands-on experience with hybrid cloud and multi-cloud networking (AWS Azure GCP).
Strong architecture documentation modeling and design governance experience.

Soft Skills

Excellent stakeholder management and communication skills.
Ability to translate technical risks into business recommendations.
Strong design governance and vendor management capabilities.
Ability to challenge and influence vendors MSPs and System Integrators.

Qualifications
Bachelors degree in Computer Science Information Technology Engineering or related discipline.
Preferred certifications: CCNP CCIE CISSP CISM or relevant Cloud Security certifications.