Senior Network Security Architect

Senior Network Security Architect NTT DATA's Client is seeking an experienced Senior Network Security Architect to design, implement, manage, and optimize enterprise network security infrastructure with a strong focus on Palo Alto Networks NGFW, Panorama, Strata Cloud Manager (SCM), and Zscaler (ZIA/ZPA) technologies. The ideal candidate will serve as a senior technical resource responsible for securing enterprise networks, cloud environments, remote access, and Zero Trust architectures while ensuring operational excellence and compliance with security standards. The role requires hands-on expertise in enterprise security operations, firewall policy management, threat prevention, cloud security, secure remote access, and troubleshooting complex network security issues. Experience with Palo Alto centralized management platforms including Panorama and Strata Cloud Manager, along with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), is essential. Key Responsibilities Design, deploy, and support Palo Alto Next-Generation Firewalls (NGFW) across enterprise environments. Manage and troubleshoot: security policies, NAT, VPNs, routing, App-ID / User-ID, SSL Decryption, URL Filtering, DNS Security, WildFire, Threat Prevention. Perform firewall upgrades, migrations, hardware refreshes, and HA deployments. Conduct rule reviews, policy optimization, and security audits. Lead troubleshooting and root cause analysis for security incidents. Panorama & Strata Cloud Manager (SCM) Manage large-scale firewall environments using Panorama and SCM. Develop centralized policy management and governance standards. Manage device onboarding, logging, policy consistency, and visibility. Utilize SCM policy analyzer and posture management features. Support security compliance and posture improvement initiatives. Zscaler Administration Design, deploy, and administer Zscaler ZIA and ZPA solutions. Configure and manage: Application Segments, App Connectors, Service Edges, Access Policies, Browser Access, Security Policies, SSL Inspection, Cloud Firewall, Data Protection Controls. Support Zero Trust initiatives. Troubleshoot connectivity, authentication, and application access issues. Lead migrations from traditional VPN solutions to ZPA. Security Operations & Cloud Integration Monitor and respond to security incidents and vulnerabilities. Perform threat hunting and security investigations. Collaborate with SOC, Cloud, Infrastructure, and Application teams. Support compliance frameworks including NIST, CIS, ISO 27001. Secure Azure and AWS environments using Palo Alto and cloud-native controls. Deploy and support Palo Alto VM-Series firewalls. Integrate security platforms with SIEM and ticketing tools. Automate security operations using APIs, Python, PowerShell, or Terraform. Required Qualifications 12+ years of Network Security / Security Engineering experience. 10+ years of hands-on Palo Alto Networks firewall experience. 10+ years managing Panorama environments. Hands-on experience with Strata Cloud Manager (SCM). 4+ years supporting Zscaler ZIA and ZPA solutions. Experience supporting enterprise-scale security operations. Core Technical Skills Palo Alto Technologies Palo Alto NGFW Administration Panorama Management Strata Cloud Manager (SCM) Palo Alto Logging Service SSL Decryption Threat Prevention WildFire DNS Security URL Filtering NAT & Security Policy Management Site-to-Site VPN & IPSec VPN Zscaler Technologies ZIA (Zscaler Internet Access) ZPA (Zscaler Private Access) Zscaler Client Connector (ZCC) Zero Trust Architecture Cloud Firewall SSL Inspection Application Segmentation Identity-Based Access Control Networking

TCP/IP

DNS DHCP VLANs Network Segmentation Routing & Switching BGP OSPF MPLS IPSec Cloud & Automation Microsoft Azure AWS Cloud Security Architecture SASE / SSE Platforms Python PowerShell Terraform Preferred Qualifications PCNSE (Palo Alto Certified Network Security Engineer) Palo Alto Strata Cloud Manager Certification Zscaler Certified Administrator (ZCCA) Zscaler Certified Architect (ZCCA / ZCCA-IA) CISSP, CISM, or CCSP Experience with Terraform and/or Ansible Scripting and automation experience Key Competencies Advanced troubleshooting and analytical skills. Strong communication and stakeholder management abilities. Experience leading security projects and major incident response efforts. Deep understanding of Zero Trust, SASE, and enterprise security architecture. Ability to work independently in a large enterprise environment. Experience mentoring junior engineers and promoting security best practices. About NTT DATA Services: NTT DATA Services is a recognized leader in IT and business services, including cloud, data and applications, headquartered in Texas. As part of NTT DATA, a $30 billion trusted global innovator with a combined global reach of over 80 countries, we help clients transform through business and technology consulting, industry and digital solutions, applications development and management, managed edge-to-cloud infrastructure services, BPO, systems integration and global data centers. We are committed to our clients' long-term success. Visit nttdata.com or LinkedIn to learn more. NTT DATA Services is an equal opportunity employer and considers all applicants without regarding to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees. If you need assistance or an accommodation due to a disability, please inform your recruiter so that we may connect you with the appropriate team. Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting hourly range for this remote role is ($80.12 - 90/hourly). This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on several factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications. This position is eligible for company benefits that will depend on the nature of the role offered. Company benefits may include medical, dental, and vision insurance, flexible spending or health savings account, life, and AD&D insurance, short-and long-term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally required benefits. NTT DATA