Network Security Architect

We are looking for a Network Security Architect to lead the security architecture for a large-scale network consolidation program at a US-based Tier-2 Telco. The role owns security design firewall rule consolidation and policy definition focusing on transforming fragmented legacy security postures into a standardized target-state architecture executable at scale. This position is ideal for professionals experienced in large-scale firewall transformations who excel at simplifying complex rule sets and designing scalable segmented security architectures.

Responsibilities

• Translate enterprise-level security architecture into actionable site-level security blueprints aligned with the overall program vision.
• Define and document the target-state architecture for the Network Security domain including firewall rule consolidation VRF-based macro-segmentation and DDoS mitigation strategies.
• Analyze and optimize legacy security policies by consolidating overlapping firewall rules into streamlined standardized templates.
• Collaborate closely with client Security and CISO teams supporting design validation risk alignment and compliance with regulatory frameworks (e.g. CISA HIPAA).
• Identify and resolve complex IP subnet overlaps and security-related routing conflicts flagged during data analysis phases.
• Define clear security exit criteria and guardrails as part of the migration factory Definition of Done (DoD).
• Contribute to architecture governance including participation in architecture reviews design approvals and development of enterprise standards and reference architectures while collaborating with cross-domain architects.

Qualifications :

• 10 years of experience in enterprise Network Security Architecture with strong focus on large-scale firewall migrations and rule consolidation.
• Deep expertise in NAT/PAT VRF segmentation Zero Trust frameworks and enterprise firewall platforms (e.g. Palo Alto Fortinet Cisco).
• Proven experience designing and integrating DDoS mitigation and traffic scrubbing solutions at network edges.
• Strong ability to translate complex security policies into standardized reusable Low-Level Design (LLD) templates suitable for automated deployment.
• Solid understanding of compliance-driven architecture with ability to align technical designs to regulatory frameworks while not owning final approvals.
• Experience working within secure client environments (VDI/VPN) and adhering to strict change control processes without direct production access.
• English proficiency at B2 (Upper-Intermediate) to C1 (Advanced) level with strong spoken communication skills.

Additional Information :

We offer:

• Culture of Relentless Performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth. 
• Competitive Pay and Benefits: enjoy a comprehensive compensation and benefits package including health insurance and a relocation program. 
• Work From Anywhere Culture: make the most of the flexibility that comes with remote work. 
• Growth Mindset: reap the benefits of a range of professional development opportunities including certification programs mentorship and talent investment programs internal mobility and internship opportunities. 
• Global Impact: collaborate on impactful projects for top global clients and shape the future of industries. 
• Welcoming Multicultural Environment: be a part of a dynamic global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events. 
• Social Sustainability Values: join our sustainable business practices focused on five pillars including IT education community empowerment fair operating practices environmental sustainability and gender equality. 

* Miratech is an equal opportunity employer and does not discriminate against any employee or applicant for employment on the basis of race color religion sex national origin age disability veteran status sexual orientation gender identity or any other protected status under applicable law.

Remote Work :

Yes

Employment Type :

Full-time