Senior Network & Network Security Architect

About the role

The organization is looking for a Senior Network & Network Security Architect with extensive experience in enterprise routing, switching, data‑center networking, load balancing and security controls. The role will design, standardize and govern network architecture to ensure high availability, scalability and security, especially within healthcare and clinical environments.

Key responsibilities

• Design and oversee enterprise LAN, WAN, SD‑WAN, Wi‑Fi and data‑center connectivity.
• Develop high‑availability, low‑latency network architectures for critical systems.
• Define network zoning, IP schema and segmentation strategies.
• Implement and govern advanced security controls such as firewalls, VPNs, WAF, IDS/IPS, DLP and secure web/email gateways.
• Lead adoption of Zero Trust, SASE, IAM and next‑generation security models.
• Produce engineering design packages, architecture diagrams and traffic flow analyses.
• Establish network and security standards, conduct vendor evaluations, PoCs and technical workshops.
• Ensure compliance with regulatory and healthcare security frameworks.

Required profile

• Minimum 10 + years of experience in enterprise network architecture and design.
• Strong background in routing, switching, LAN/WAN, wireless and data‑center technologies.
• Proven expertise with firewalls, VPNs, WAF, IDS/IPS, DLP and network segmentation.
• Experience in healthcare or other regulated environments is highly preferred.
• Excellent communication, documentation and stakeholder engagement skills.
• Bachelor’s degree in IT, Computer Science or related field (Master’s preferred).

Required skills

• Enterprise routing and switching (including VRFs, VLANs, Nexus)
• LAN, WAN, SD‑WAN and Wi‑Fi design
• Data‑center networking and high‑availability design
• L4/L7 load balancing
• Firewalls, VPNs and Web Application Firewall (WAF)
• IDS/IPS, DLP and secure web/email gateways
• SASE, Zero Trust and Identity & Access Management (IAM)
• Cloud Secure Web Gateway (SWG) and hybrid cloud connectivity
• IP schema design, network zoning and segmentation
• Network Access Control (NAC) and proxy technologies