Description

Key Responsibilities

· Develop, maintain, and govern enterprise network security architecture across on-premises, cloud, hybrid, and remote environments.

· Design secure, scalable, and resilient network solutions aligned with business goals and cybersecurity strategy.

· Create and maintain enterprise standards, reference architectures, design patterns, and implementation guidance.

· Provide architectural leadership for initiatives involving:

o Zero Trust Architecture

o Network Segmentation

o Secure Remote Access

o Cloud Connectivity

o Network Modernization

o SASE/SSE Solutions

· Lead architecture reviews, threat modeling exercises, and risk assessments.

· Partner with Enterprise Architecture, Infrastructure, Security Engineering, Cloud Engineering, IAM, and Network Engineering teams.

· Evaluate emerging technologies and provide recommendations based on business and security requirements.

· Support technology assessments, trade studies, vendor evaluations, and RFP activities.

· Develop technical roadmaps and strategic architecture guidance.

· Present and defend architectural recommendations to technical leadership and engineering teams.

· Mentor engineers and architects on network security best practices.

Required Qualifications

· Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience.

· 8+ years of experience in Network Engineering, Network Security, Security Architecture, or related disciplines.

· Strong expertise in:

o Routing and Switching

o TCP/IP

o DNS

o DHCP

o VPN Technologies

o Load Balancing

o Enterprise Network Protocols

· Experience designing and securing large-scale enterprise networks.

· Experience securing AWS and Azure networking environments.

· Familiarity with enterprise firewall platforms, network access control, and secure gateways.

· Experience creating architecture standards, technical documentation, and governance artifacts.

· Knowledge of cybersecurity frameworks including:

o NIST Cybersecurity Framework

o NIST 800-53

o NIST 800-207 (Zero Trust)

o CIS Controls

o Defense-in-Depth Principles

Preferred Experience

· Experience within large, complex, and highly regulated organizations.

· Utility, energy, critical infrastructure, or NERC-regulated environment experience.

· Cloud transformation and hybrid networking initiatives.

· Enterprise architecture governance.

· Leadership of cross-functional security and infrastructure programs

Key Skills

Education

Bachelor's degree