Network security architect

Job Summary: We are looking for an energetic Network Security Architect join our team. In this role, you’ll work cross-functionally with business operations and to create and optimize workflow processes. Responsibilities: As a Network Security Architect in the Cybersecurity Architecture Center of Excellence, your responsibilities include a comprehensive review and redesign of the existing network security infrastructure and capabilities for on-premises, client, and hybrid-cloud environment. You will also influence changes in existing control standards, create new IT security standards that are easily consumed by stakeholders, create specific security patterns & diagrams, and own the relevant 3-year capability roadmap. Your Primary Responsibilities:· Produce security architecture deliverables as part of initiatives related to network modernization and Zero Trust paradigm.· Proactively identify security gaps, propose solutions, and follow through with engineering teams for implementation.· Be the subject matter expert for Network Security through the enterprise along with the security architecture team.· Inspire team members and junior staff to contribute new ideas and alternative approaches· Design and optimize solutions to protect organization’s network infrastructure, integrating cloud-based and on-premise components such as firewalls, load balancers, WAF, proxies, SD-WAN solutions, DDo S mitigation systems.· Create and drive the internal and client network security capability roadmap within information technology & the respective IT stakeholders.· Create and drive the Zero Trust network modernization roadmap within information technology & the respective IT stakeholders.· Design Zero Trust network security controls through modern security technologies such as CASB, CNAPP.· Influence change of control policies with Technology Risk Management & build strong partnerships with IT Architecture & Application Development partners.· Create IT security standards and drive best-practices which are easily consumed by IT stakeholders.· Lead the technical analysis of network security capabilities with the aim of delivery new or enhanced security capabilities.· Identify automation opportunities for network security controls lifecycle management.· Act as the domain specialist to help guide and shape how network security controls are enabled and enforced.· Mentor junior security architects to enhance their security and architecture skills within the team.· Deliver high-quality executive architecture presentations and demonstrations.· Maintain professional and technical process knowledge by keeping abreast of the changing security landscape within the technology industry and changes in cybersecurity frameworks.· Create white papers and presentations in industry conferences to present thought leadership in security field.· Align risk and control processes into day-to-day responsibilities to monitor and mitigate risk; escalates appropriately Qualifications 7+ years of related experience· Bachelor degree preferred in STEM areas such as Computer Science, Electrical & Computer Engineering, Information Management, Big Data & Analytics Talents Needed for Success:· Strong Information Security experience, specifically in network security domain (on premise and hybrid-cloud).· Solid working knowledge with Next Gen firewalls and features such as URL, IPS, malware and content filtering, proxies, WAFs, traffic capturing and inspection technologies.· Provide expert knowledge and experience performing deep packet troubleshooting with Wireshark, packet analyzer.· In-depth knowledge of Zero Trust paradigm and network pillar designs improvements aligned with Zero Trust best practices.· Working knowledge with 3+ vendors such as: Palo Alto NGFW, F5 LTM, APM, GSLB/GTM, Zscaler, Akamai, AWS network primitives (VPC, Direct Connect), Azure network primitives (VNET, Express Route).· Experience in routing protocols and switching, BGP, OSPF, VRF, GRE, NAT/PAT, MPLS, SSL, IPSec tunnel, SSL offloading, multicasting, traffic balancing, high availability techniques, IPv4, IPv6.· Expert level experience with WAN deployments including EIGRP/BGP route redistribution over MPLS and/or SD-WAN networks, route maps and filtering, traffic prioritization and Qo S policies.· Solid experience with Python, networking fundamentals, OS (Windows/Linux) security.· Experience with Information Security frameworks (e. G. ISO 27001 and NIST) & security architecture frameworks.· Proficient in how Active Directory works.· Knowledge of Public DNS.· Familiar with PKI and SSL Certificate management.· Solid analytical skills to troubleshoot high-level, complex and technical problems.· Strong organizational skills and multi-tasking ability.· Ability to prioritize and execute tasks in high pressure environment and make sound decisions in emergency situations.· Strong technical writing skills to support required documentation.· Has strong communication skills with the ability to present in front of large audience.· Demonstrated ability to collaborate between product management, engineering, risk, and IT teams.· Willingness to learn, be a team player and a strong cross functional partner.· Adapts quickly to changes in business requirements.· Self-motivated individual that can work independently on projects, as well as a team player working towards a common goal. System Soft Technologies is a proud equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, sexual orientation, or any other characteristic protected by law. We are committed to the full inclusion of all qualified individuals. If you are an individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting us at