Senior Network Security Architect

Senior Network Security Architect

Required Skills & Experience Active CCIE Security certification (mandatory, no substitutions). 10+ years of network and network security experience. 5+ years leading network security architecture, assessment, or consulting engagements. Deep expertise with Cisco networking and security technologies, including: Cisco Secure Firewall / Firepower Cisco ASA Cisco ISE Cisco TrustSec IOS / IOS XE VPN technologies Enterprise routing and switching Strong experience assessing and designing large-scale enterprise network security environments. Hands-on experience with network segmentation using: VLANs VRFs ACLs Firewalls Security zones Identity-based access controls Microsegmentation strategies Experience designing secure hybrid cloud and data center architectures. Ability to analyze network configurations, firewall rules, routing tables, traffic flows, and architecture diagrams. Experience creating architecture diagrams, assessment reports, technical documentation, and implementation roadmaps. Strong stakeholder management, workshop facilitation, and executive presentation skills. Ability to work independently as the sole technical lead.

Nice to Have Skills & Experience Experience supporting public utilities, critical infrastructure, power, water/wastewater, or regulated environments. Experience working in environments with both IT and operational technology (OT) dependencies. Knowledge of: NIST Cybersecurity Framework NIST SP 800-207 (Zero Trust Architecture) CIS Controls Experience with: Palo Alto Networks Fortinet Cloud-native firewalls SD-WAN SASE / ZTNA DDoS protection platforms DNS security solutions Network Access Control (NAC) Workload microsegmentation technologies Experience developing migration strategies, implementation estimates, and network modernization roadmaps.

Job Description The Senior Network Security Architect will serve as the sole technical lead for a network security assessment and reference architecture engagement for a major U.S. public utility. This individual will assess the current network environment, identify security and segmentation gaps, and develop a target-state architecture and implementation roadmap that can be executed by the client's internal network team.

Day-to-Day Responsibilities Lead discovery sessions, workshops, interviews, and technical reviews with cybersecurity, network, infrastructure, cloud, and operations teams. Assess enterprise WAN/LAN, data centers, cloud connectivity, internet edge, partner connections, remote access, VPNs, routing, switching, and firewall environments. Analyze existing network segmentation, trust boundaries, security zones, ACLs, VRFs, firewalls, and identity-based controls. Identify lateral movement risks, excessive network access, segmentation gaps, and architectural weaknesses. Develop a target-state network security and segmentation architecture aligned to Zero Trust principles. Create trust-zone models, secure access patterns, management-plane security standards, and east-west/north-south traffic control strategies. Produce architecture diagrams, design documentation, findings reports, and executive presentations. Build a phased implementation roadmap including quick wins, dependencies, transition states, and prioritized initiatives. Facilitate stakeholder alignment and present recommendations to both executive and technical audiences. Provide knowledge transfer to internal network and security teams.