Senior Network Security Architect

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem-solving, passion, and creativity to help us power the next leap in electronics. At Qnity , we’re more than a global leader in materials and solutions for advanced electronics and high-tech industries – we’re a tight-knit team that is motivated by new possibilities, and always up for a challenge. All our dedicated teams contribute to making cutting-edge technology possible. We value forward-thinking challengers, boundary-pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us. Qnity is seeking a Senior Network Security Architect to define secure, practical network patterns across our global enterprise, cloud, manufacturing, and remote-access environments. This role will partner closely with Network Engineering, Cloud, Infrastructure, Manufacturing IT, Cybersecurity Operations, and project teams. The architect will develop reference architectures and standards, review designs, and provide flexible implementation options that balance security, reliability, cost, and delivery timelines. This is a hands-on architecture role. The successful candidate must be comfortable moving between strategic design and detailed discussions involving routing, firewall policy, DNS, TLS, remote access, cloud connectivity, segmentation, and application data flows. Key Responsibilities * Develop network security reference architectures, standards, and approved design patterns. * Define secure patterns for enterprise, Azure, manufacturing, remote access, partner connectivity, internet egress, and application publishing. * Serve as the security architecture lead for the Palo Alto Networks portfolio, including NGFW, Panorama or Strata Cloud Manager, Prisma Access, GlobalProtect, and related security services. * Review firewall, segmentation, remote-access, cloud, and third-party connectivity designs. * Provide practical implementation options rather than a single rigid solution. * Identify architectural requirements, preferred approaches, and acceptable alternatives. * Integrate network security with Microsoft Entra ID, Defender, Sentinel, Intune, Azure, PKI, vulnerability management, identity, endpoint security, and incident response. * Support hybrid cloud and on-premises designs, including Azure routing, private endpoints, cloud egress, DNS, and secure connectivity. * Develop segmentation and remote-support patterns for manufacturing and operational technology environments. * Partner with project teams to resolve network security issues early in the design process. * Define requirements for logging, monitoring, policy ownership, firewall-rule lifecycle management, and security telemetry. * Maintain clear, usable architecture documentation, diagrams, and technical decision records. Required Qualifications * Significant experience in network security architecture or engineering within a complex enterprise. * Strong knowledge of the Palo Alto Networks platform, including NGFW, Prisma Access, GlobalProtect, and centralized management. * Strong understanding of enterprise networking, including routing, DNS, NAT, VPNs, proxies, TLS, segmentation, and high availability. * Experience designing security across both cloud and on-premises environments. * Strong knowledge of Microsoft Azure networking and familiarity with Microsoft security technologies. * Experience integrating network controls with SIEM, identity, endpoint, vulnerability-management, and IT service-management platforms. * Ability to translate application and business requirements into secure, supportable network designs. * Experience developing reference architectures, engineering standards, and reusable design patterns. * Strong written, verbal, and diagramming skills. * Demonstrated judgment in balancing security requirements with operational and project constraints. Preferred Qualifications * Experience in a global manufacturing or industrial environment. * Familiarity with Purdue-model segmentation and operational technology. * Experience with Microsoft Sentinel, Defender, Entra ID, Intune, ServiceNow, FireMon, or similar platforms. * Experience with Azure Virtual WAN, ExpressRoute, Windows 365, Azure Virtual Desktop, and hybrid connectivity. * Relevant certifications such as PCNSE, CCNP Security, Microsoft Azure, or CISSP. Professional Characteristics * Pragmatic, technically credible, and comfortable challenging weak designs. * Able to explain both what must change and how it can be implemented. * Flexible in approach without weakening core security requirements. * Comfortable working in a developing organization where standards and operating models are still being established. * Produces architecture that engineering teams can actually use. #LI-LH1 #LI-Hybrid Join our Talent Community to stay connected with us! Qnity is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class. If you need a reasonable accommodation to search or apply for a position, please visit our Accessibility Page for Contact Information . Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page . We use Artificial Intelligence (AI) to enhance our recruitment process.