Network Security Architect

Key Responsibilities

• Collaborate with application and infrastructure teams to gather and analyze network security requirements including connectivity, allowed ports, protocols, and data flows.
• Translate application requirements into detailed and actionable network security policies and firewall rules.
• Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.
• Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.
• Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.
• Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.
• Support troubleshooting and optimization of existing cloud network security configurations.

Key Requirements and Technology Experience

• AWS Public Cloud experience, Expertise in network security and designing and implementing, infrastructure and architecture background, information security background-familiar with technology risk domains
• 5+ years experience in network security architecture or engineering, preferably with a focus on cloud environments (AWS strongly preferred).
• Strong understanding of network security controls: firewalls (Palo Alto experience highly desired), Security Groups, VPN, and layered defense models.
• Proven ability to translate application connectivity needs into firewall rule sets and network security designs.
• Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
• Experience working alongside application teams in a collaborative Agile or DevSecOps environment.
• Excellent communication skills, capable of documenting and presenting complex technical information clearly.
• Ability to work independently and drive results in a fast-paced, dynamic environment.
• AWS certifications (e.g., AWS Security Specialty, Solutions Architect)
• Experience with enterprise firewall policy management and automation tools.
• Background in financial services or highly regulated environments.