Senior Network Architect

Senior Network Architect

Posted 1 week ago by 1755852512

Negotiable
Outside
Remote
USA

Summary: The Senior Network Architect role involves leading global initiatives to enhance threat prevention infrastructure, focusing on network security and connectivity. The position requires extensive experience in network security technologies and the ability to create strategic roadmaps for information security. The architect will also provide technical oversight and collaborate with business partners to optimize security solutions. This role is primarily remote, allowing for flexibility in work arrangements.

Key Responsibilities:

  • Creating threat prevention roadmaps, infrastructure changes, and application & network diagrams.
  • Leading global initiatives to create and transform infrastructure solutions across the threat prevention space.
  • Providing technical oversight in identifying, evaluating, and developing infrastructure solutions.
  • Key decision-maker to chart future prevention of threats and development of service.
  • Securing network connectivity leveraging varying content inspection systems for malware prevention, data loss prevention, and forensic analysis.
  • Utilizing creative-thinking and advanced problem-solving skills to build and maintain strategic roadmaps that enhance information security mission while optimizing cost, business needs, and end user experience.
  • Communicating with business partners at an enterprise level interfacing with internal business representatives and information security partners.
  • Offering technical advising to other team members and supported areas.

Key Skills:

  • Network Security Expertise (10+ years).
  • TCP/IP, DNS, DHCP, switching/routing, firewalls, IPS, packet analysis.
  • Excellent understanding of safe network connectivity & content inspection for malware/DLP/forensic requirements.
  • Experience with Proxy (McAfee/Skyhigh), Malware (FireEye/Trellix), SASE (Netskope, Palo Alto, Zscaler).
  • SSL Decryption / SSL Offload / HSM knowledge.
  • Demonstrated senior level experience in web proxy servers for enhanced content filtering.
  • Expertise in malware prevention and data loss prevention systems, including Day Zero threat prevention.
  • Extensive knowledge on fundamental networking concepts.
  • Capacity to summarize complex issues into executive summaries.
  • Basic understanding of Cryptography, SSL certificates, and HSM/HSMaaS.
  • Familiarity with cloud encryption technology and SEIM tools such as Arcsight, Splunk.
  • People management experience is a plus.
  • Integration with cloud service providers like Azure, Google, AWS, IBM.
  • Virtualization expertise and familiarity with automation scripts.
  • Programming skills; scripting/automation of different security products.
  • Familiarity with Linux, Python, Apache, HTML + Bootstrap, and SQL.
  • Using APIs to enrich automation routines.

Salary (Rate): undetermined

City: undetermined

Country: USA

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Role: Senior Network Architect Location: Remote/ Plano, TX

Duration: 6 months

Skill Set:

Network Security - Network Security Expertise (10+ years)
TCP/IP, DNS, DHCP, switching/routing, firewalls, IPS, packet
Excellent understanding of safe network connectivity & content inspection for malware/DLP/forensic requirements.
Threat Prevention Engineering
Web Proxy (Skyhigh/McAfee, BlueCoat), Malware prevention (FireEye/Trellix), SASE (Zscaler, Palo Alto, Netskope).
SSL Decryption / SSL Offload / HSM.
Prevention of Day Zero.
Design & Architecture
Digital Python, Unix Administration 10+ years

Essential Skills:
Demonstrated senior level experience in at least one of the following (in order of preference):
Proxy (preferred by McAfee / Skyhigh), Malware (preferred by FireEye / Trellix), SASE (Netskope, Palo Alto, Zscaler preferred), SSLO (preferred by F5)
Experience with web proxy servers for enhanced content filtering.
Expertise in malware prevention and data loss prevention systems, including Day Zero threat prevention.
MUST have extensive knowledge on fundamental networking concepts of DNS, DHCP, Firewalls.
Load balancing, IPS, fundamentals of routing/switching; excellent understanding of TCP/IP and packet analysis.
Experience with building Application and network diagrams with all relevant flows and decisions.
Capacity to summarize complex issues into executive summaries.
Basic understanding of Cryptography, SSL certificates, SSL decryption / offload methodologies, HSM/HSMaaS.
Knowledge of the following technology and/or platforms useful CipherCloud or other cloud encryption technology.
Zscaler, Radware, FireEye, Websense, Scansafe, Ironport, Damballa, Vontu, Skyhigh, Palantir, Cloudera platforms SEIM tools such as Arcsight, Splunk.

Preferred Skills:
People management a plus, but not required, Mid to senior level expertise in Broadcom / BlueCoat Proxy Security Gateways.
Integration with cloud service providers like Azure, Google, AWS, IBM.
Virtualization expertise, ESXi server administration, vSphere, vCenter, vSAN, vMotion to convert hardware-based infra to virtual platforms.
Familiarity with automation scripts (like Ansible, Terraform).
Programming skills; scripting/automation of different security products.
Familiarity with data modeling and conduct advanced analytics.
Understanding of cloud encryption and tokenization (i.e., Salesforce topology and integration of Salesforce / Servicenow clouds with Cloud encryption gateway).
Familiarity with Linux, Python, Apache, HTML + Bootstrap, and SQL.
Using APIs to enrich automation routines.

Responsibilities:
Creating threat prevention roadmaps, infrastructure changes, and application & network diagrams.
Threat Design Engineer will Lead global initiatives to create and transform infrastructure solutions across the threat prevention space.
Provides technical oversight in identifying, evaluating, and developing infrastructure solutions.
Key decision-maker to chart future prevention of threats and development of service.
Secure network connectivity leveraging varying content inspection systems for malware prevention, data loss prevention, and forensic analysis.
Utilize creative-thinking and advanced problem-solving skills to build and maintain strategic roadmaps that enhance information security mission while optimizing cost, business needs, and end user experience.
Communicate with business partners at an enterprise level interfacing with internal business representatives and information security partners.
Offer technical advising to other team members and supported areas.