Job Description
This is a remote position.
Position Summary
We are seeking a Senior Network Security Architect & Engineer to lead the design, implementation, modernization, and optimization of enterprise network security infrastructures. The ideal candidate possesses deep expertise across Cisco, Palo Alto Networks, Fortinet, and Brocade technologies, with extensive experience designing Zero Trust network architectures for large enterprise environments. This role requires a hands-on technical leader who can architect secure network solutions while partnering with stakeholders to drive strategic security initiatives.
Cloud networking experience in Microsoft Azure, AWS, or Google Cloud Platform is highly desirable.
Primary Responsibilities
Design, implement, and support enterprise network security architectures across campus, data center, branch, and cloud environments.
Develop and implement Zero Trust network architectures aligned with NIST SP 800-207 principles.
Design secure segmentation strategies using traditional and software-defined networking technologies.
Architect and deploy next-generation firewall (NGFW) solutions, VPNs, secure remote access, and microsegmentation.
Lead network modernization initiatives, including hardware refreshes, network consolidation, and migration projects.
Design highly available and resilient network infrastructures supporting business-critical applications.
Configure and optimize routing, switching, wireless, and security platforms.
Conduct network security assessments, architecture reviews, and risk analyses.
Develop network security standards, reference architectures, and technical documentation.
Collaborate with cybersecurity, cloud, infrastructure, and application teams to integrate secure networking solutions.
Troubleshoot complex network and security issues across hybrid environments.
Provide technical leadership, mentoring, and knowledge transfer to engineering teams.
Required Technical Skills
Cisco Technologies
Cisco Catalyst Switching
Cisco Nexus Data Center Switching
Cisco ISR / ASR Routers
Cisco ACI
Cisco Firepower
Cisco Secure Firewall
Cisco Identity Services Engine (ISE)
Cisco Secure Access (preferred)
Cisco DNA Center
Cisco SD-WAN
Cisco Wireless LAN Controllers
Cisco ThousandEyes (preferred)
Palo Alto Networks
Palo Alto Next-Generation Firewalls
Panorama
GlobalProtect
Prisma Access
Prisma SD-WAN (preferred)
App-ID
User-ID
Device-ID
Threat Prevention
URL Filtering
WildFire
DNS Security
Fortinet
FortiGate
FortiManager
FortiAnalyzer
FortiAuthenticator
FortiNAC
FortiSwitch
FortiClient
FortiWeb (preferred)
Brocade
Brocade Fibre Channel Switching
Brocade SAN Infrastructure
Brocade IP Networking
SAN Fabric Management
Networking Expertise
Enterprise Routing & Switching
BGP
OSPF
EIGRP
VXLAN
EVPN
MPLS
SD-WAN
Software Defined Networking (SDN)
High Availability
Network Load Balancing
QoS
Network Performance Optimization
IPv4 / IPv6
Multicast
Network Security Expertise
Zero Trust Architecture
Microsegmentation
East-West Traffic Protection
Network Access Control (NAC)
Identity-Based Networking
Network Detection & Response (NDR)
IDS / IPS
Secure Remote Access
Site-to-Site VPN
Remote Access VPN
SSL Inspection
Network Threat Hunting
DDoS Mitigation
Secure DNS
PKI
Network Encryption
Required Experience
10+ years of enterprise networking experience.
7+ years designing and implementing enterprise network security solutions.
Experience leading large-scale network modernization or transformation projects.
Extensive experience with Cisco, Palo Alto Networks, Fortinet, and Brocade platforms.
Experience designing highly available enterprise network architectures.
Experience implementing Zero Trust network strategies.
Experience supporting enterprise environments with multiple data centers and cloud connectivity.
Strong troubleshooting skills across complex hybrid infrastructures.
Desired Knowledge
SASE (Prisma Access, Cisco Secure Access, FortiSASE, Netskope, or Zscaler)
SSE (Security Service Edge)
Network automation using Python, Ansible, or Terraform
Infrastructure as Code (IaC)
Kubernetes networking
Service mesh technologies
Network observability platforms (ThousandEyes, Kentik, LogicMonitor, SolarWinds)
OT/ICS network security
AI-assisted network operations (AIOps)
Ideal Candidate Profile
The ideal candidate is a seasoned network security architect who combines deep hands-on engineering expertise with strategic architectural vision. They have successfully designed and deployed large-scale Cisco, Palo Alto, Fortinet, and Brocade environments, understand how to implement Zero Trust principles across enterprise networks, and can guide organizations through modernization initiatives spanning on-premises, hybrid, and cloud environments. They are equally comfortable developing long-term network strategies, leading complex implementations, and serving as a trusted technical advisor to executive and engineering stakeholders.