Network Security Architect

Job Description The Senior Network Security Architect will serve as the sole technical lead for a network security assessment and reference architecture engagement for a major U.S. public utility. This individual will assess the current network environment, identify security and segmentation gaps, and develop a target-state architecture and implementation roadmap that can be executed by the client’s internal network team. Day-to-Day Responsibilities Lead discovery sessions, workshops, interviews, and technical reviews with cybersecurity, network, infrastructure, cloud, and operations teams. Assess enterprise WAN/LAN, data centers, cloud connectivity, internet edge, partner connections, remote access, VPNs, routing, switching, and firewall environments. Analyze existing network segmentation, trust boundaries, security zones, ACLs, VRFs, firewalls, and identity-based controls. Identify lateral movement risks, excessive network access, segmentation gaps, and architectural weaknesses. Develop a target-state network security and segmentation architecture aligned to Zero Trust principles. Create trust-zone models, secure access patterns, management-plane security standards, and east-west/north-south traffic control strategies. Produce architecture diagrams, design documentation, findings reports, and executive presentations. Build a phased implementation roadmap including quick wins, dependencies, transition states, and prioritized initiatives. Facilitate stakeholder alignment and present recommendations to both executive and technical audiences. Provide knowledge transfer to internal network and security teams.

Skills and Requirements Active CCIE Security certification (mandatory, no substitutions). 10+ years of network and network security experience. 5+ years leading network security architecture, assessment, or consulting engagements. Deep expertise with Cisco networking and security technologies, including: Cisco Secure Firewall / Firepower Cisco ASA Cisco ISE Cisco TrustSec IOS / IOS XE VPN technologies Enterprise routing and switching Strong experience assessing and designing large-scale enterprise network security environments. Hands-on experience with network segmentation using: VLANs VRFs ACLs Firewalls Security zones Identity-based access controls Microsegmentation strategies Experience designing secure hybrid cloud and data center architectures. Ability to analyze network configurations, firewall rules, routing tables, traffic flows, and architecture diagrams. Experience creating architecture diagrams, assessment reports, technical documentation, and implementation roadmaps. Strong stakeholder management, workshop facilitation, and executive presentation skills. Ability to work independently as the sole technical lead. Experience supporting public utilities, critical infrastructure, power, water/wastewater, or regulated environments. Experience working in environments with both IT and operational technology (OT) dependencies. Knowledge of: NIST Cybersecurity Framework NIST SP 800-207 (Zero Trust Architecture) CIS Controls Experience with: Palo Alto Networks Fortinet Cloud-native firewalls SD-WAN SASE / ZTNA DDoS protection platforms DNS security solutions Network Access Control (NAC) Workload microsegmentation technologies Experience developing migration strategies, implementation estimates, and network modernization roadmaps. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.