Description

Key Responsibilities

1. Network Security Architecture & Leadership (Primary)

• Act as the technical authority for enterprise network security architecture
• Design, standardize, and maintain Palo Alto NGFW architectures, including:
  • Zones and segmentation
  • Security and NAT policy design
  • IPS/IDS, threat prevention, URL filtering, and decryption
  • Remote access and site‑to‑site VPNs
• Lead Panorama architecture and governance (templates, device groups, standards)
• Review and approve firewall changes, designs, and security exceptions
• Guide firewall migrations, upgrades, and modernization initiatives
• Ensure adherence to security best practices and regulatory frameworks (e.g., NIST, CIS)

2. Network Data Architecture – Cisco Switching (Secondary)

• Maintain strong architectural understanding of Cisco enterprise switching:
  • Core, distribution, and access layer design
  • VLANs, trunking, routing (OSPF/BGP/EIGRP), port‑channels
• Ensure secure integration between Cisco switching and Palo Alto firewalls
• Advise on segmentation, resiliency, and performance from a security‑first perspective
• Support network design reviews where security and data networks intersect

3. Wireless & Campus Networking – Meraki / Cisco DNA

• Provide architectural oversight for Cisco Meraki Wi‑Fi environments
  • Wireless policies, segmentation, and access control
  • Dashboard governance and design standards
• Support and guide Cisco DNA Center deployments for:
  • Network automation and assurance
  • Visibility, telemetry, and compliance
• Ensure wireless and campus networks align with enterprise security strategy

4. Governance, Risk & Compliance

• Define and maintain security architecture standards, SOPs, and diagrams
• Support audits and compliance efforts (government / regulated environments)
• Translate technical security risks into clear business impact for leadership
• Review vendor solutions and provide architectural recommendations

5. Collaboration & Mentorship

• Work closely with:
  • Network engineering teams
  • Security operations and SOC teams
  • Cloud and infrastructure teams
• Mentor engineers and provide technical guidance
• Serve as escalation point for complex network security issues

Required Skills & Experience

Must‑Have (Primary)

• Strong hands‑on and architectural experience with Palo Alto NGFW & Panorama
• Deep understanding of network security concepts and enterprise design
• Proven experience designing security for large enterprise or government environments
• Ability to lead technical discussions and make architecture decisions

Secondary / Supporting Skills

• Solid working knowledge of:
  • Cisco enterprise switching (Data networks)
  • Cisco Meraki wireless
  • Cisco DNA Center
• Understanding of how network data, wireless, and security architectures integrate
• Experience working with cross‑functional infrastructure teams

Preferred / Nice to Have

• Exposure to Infoblox (DNS/DHCP/IPAM)
• Cloud networking/security experience (AWS / Azure)
• Familiarity with Zero Trust, SASE, or Prisma Access
• Experience in public sector, city, or regulated environments

Certifications (Preferred)

• PCNSE or PCNSA (Palo Alto Networks)
• CCNP / CCIE (Enterprise or Security)
• CISSP / CISM (strongly preferred for Architect/Lead roles)

Experience Level

• 10–15+ years overall network & security experience
• 5+ years in senior engineering, architect, or technical lead roles

Key Skills

Education

Bachelor's degree