Network Security Architect

We are a national staffing firm and are currently seeking a Network Security Architect for a prominent client of ours. This position can be remote (supporting meetings in EST). Details of the position are as follows:


Job Details:

• 1 year assignment, possibility of extension based on performance and budget.
• Standard hours, but will need to support meetings in EST, Remote.
• Position will support a critical migration initiative moving key applications and workloads to the AWS public cloud. This role will work closely with application teams, the security architecture group, and the perimeter defense team to define and implement network security requirements that ensure secure and compliant cloud adoption.
• Collaborate with application and infrastructure teams to gather and analyze network security requirements including connectivity, allowed ports, protocols, and data flows.
• Translate application requirements into detailed and actionable network security policies and firewall rules.
• Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.
• Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.
• Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.
• Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.
• Support troubleshooting and optimization of existing cloud network security configurations. The ideal candidate will have strong communication, project management, and technical acumen, with the ability to lead stakeholder discussions, document requirements, manage delivery risks, and support quick proof-of-concepts using Microsoft Copilot Studio or similar platforms to validate business expectations and solution feasibility.

• High School Diploma is Required. Bachelor's degree is preferred.
• 5+ years' experience in network security architecture or senior engineering, with a focus on AWS cloud environments.
• AWS Public Cloud experience is required.
• Background in financial services, banking or card services.
• Strong understanding of network security controls: firewalls ( Palo Alto experience), Security Groups, VPN, and layered defense models.
• Proven ability to translate application connectivity needs into firewall rule sets and network security designs.
• Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
• Experience working alongside application teams in a collaborative Agile or DevSecOps environment.

• AWS certifications (e.g., AWS Security Specialty, Solutions Architect)
• Experience with enterprise firewall policy management and automation tools.