Network Security Architect

The Role

This is an embedded security architecture role supporting the modernisation of network security, secure access and enterprise connectivity within a large, regulated organisation.

The opportunity is best suited to a Senior Network Security Engineer, Network Security Consultant or Network Architect who has recently moved into architecture. You will bring strong hands-on engineering credibility while taking ownership of architecture patterns, technical standards and design decisions.

You will work closely with network engineering, operations, cyber security and product teams across cloud, data centre and end-user environments.

Key Responsibilities

• Act as the embedded security architecture partner for network security, secure access and connectivity initiatives.
• Define roadmaps, reference architectures, standards and implementation guardrails for enterprise network security services.
• Design identity-centric access models incorporating user identity, device posture, endpoint controls and application risk.
• Provide architecture leadership across firewall services, secure internet access, private access, DNS security and hybrid connectivity.
• Establish practical patterns for network segmentation, workload isolation, resilience and security observability.
• Support design assurance, Terraform, infrastructure-as-code, policy-as-code and network security automation activities.

Must-Have Experience

• Strong hands-on background in network security engineering, network architecture or security consulting, with recent architecture ownership.
• Deep experience across enterprise firewalls, secure internet access, DNS security and network security services.
• Practical understanding of Zero Trust Architecture and identity-integrated secure access models.
• Experience designing network segmentation, network isolation and secure hybrid connectivity across cloud and data centre environments.
• Ability to produce reference architectures, standards, architecture decision records and reusable implementation patterns.
• Strong stakeholder engagement skills and experience working with engineering and operations teams in complex enterprise environments.

Nice-to-Have Experience

• Check Point firewall architecture and lifecycle management.
• Netskope Secure Web Gateway or private access technologies.
• Illumio or comparable network segmentation platforms.
• SD-WAN, cloud networking or cloud-native controls across AWS, Azure or GCP.
• Terraform, policy-as-code, security automation or network telemetry integration.
• CISSP, CCSP, SABSA or relevant network security vendor certifications.

What's on Offer