Job Description

Role Purpose

The Network & Security Architect is responsible for designing, governing, and assuring secure, scalable, and resilient network and security architectures across on-premises, cloud, hybrid, and edge environments. This role acts as the design authority and trusted advisor, ensuring solutions align with business objectives, regulatory requirements, and operational standards.

Key Responsibilities

Network & Security Architecture

Design end-to-end network and security solutions across LAN, WAN, WLAN, SD-WAN, data centers, cloud, internet edge, DMZ, and remote access environments.
Develop secure architecture patterns including network segmentation, Zero Trust, secure inter-zone communication, high availability, redundancy, and failover.
Create architecture diagrams, reference architectures, and detailed design documentation.

Security Technology Architecture

Architect and standardize enterprise security technologies including NGFWs, IDS/IPS, VPNs, NAC, Secure Web Gateways, and DDoS protection.
Evaluate and integrate new security technologies.
Ensure security controls are layered, auditable, and aligned to enterprise standards.

Governance & Standards

Define and maintain network and security architecture standards, design principles, and approved technology stacks.
Review designs from application, cloud, and SI/MSP teams.
Ensure compliance with security policies, regulatory requirements, and risk frameworks.

Risk Management & Threat Modeling

Conduct architecture-level risk assessments for new services, cloud migrations, and partner integrations.
Lead threat modeling and defense-in-depth reviews.
Ensure security risks are mitigated through design and architecture decisions.

Cloud & Zero Trust Architecture

Design secure networking solutions across AWS, Azure, and GCP.
Define hybrid connectivity, SaaS access, and Zero Trust networking models.
Integrate cloud solutions with enterprise security controls and identity-aware access patterns.

Managed Services & Solution Assurance

Act as the client-side design authority for SI/MSP-managed environments.
Review and approve solution designs and implementations.
Ensure operational readiness, SLA compliance, and prevention of non-standard technology deployments.

Resilience & Incident Support

Provide architectural guidance during major incidents, security events, and root cause investigations.
Design resilient solutions supporting rapid recovery, fault isolation, and reduced impact during outages.
Required Skills & Experience

Technical Skills

Strong expertise in enterprise networking, routing, switching, segmentation, and network security architectures.
Experience with Firewalls, IDS/IPS, VPNs, Zero Trust, and identity-aware networking.
Hands-on experience with hybrid cloud and multi-cloud networking (AWS, Azure, GCP).
Strong architecture documentation, modeling, and design governance experience.

Soft Skills

Excellent stakeholder management and communication skills.
Ability to translate technical risks into business recommendations.
Strong design governance and vendor management capabilities.
Ability to challenge and influence vendors, MSPs, and System Integrators.

Qualifications
Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.
Preferred certifications: CCNP, CCIE, CISSP, CISM, or relevant Cloud Security certifications.