Network Security Architect

About the role

The organization seeks a senior professional to design, develop, and implement enterprise‑wide network architecture that meets the highest technical and security standards. The role leads strategic initiatives to enable and protect digital services while aligning with the company’s digital transformation goals.

Key responsibilities

• Design enterprise‑level network architecture covering LAN, WAN, data centers, and branch connectivity.
• Own the full lifecycle of network and security projects, from requirements gathering to post‑implementation optimization.
• Provide expert guidance on multi‑vendor platforms such as Cisco, Juniper, Palo Alto, Fortinet, F5, Huawei, and traffic‑decryption/anti‑DDoS solutions.
• Develop and enhance network infrastructure using advanced technologies like Cisco ACI and ensure seamless security integration.
• Lead deployment of digital services and protect them with secure, scalable network solutions.
• Oversee core network, data‑center, and branch administration to guarantee high availability and secure operations.
• Implement Business Continuity and Disaster Recovery strategies for network infrastructure.
• Design, deploy, and monitor network and security performance systems, applying technologies such as NGFW, Zero Trust, micro‑segmentation, and threat detection.
• Troubleshoot complex network and security issues using tools like Wireshark and perform deep packet analysis.

Required profile

• Bachelor's degree in Network Engineering, Computer Engineering, Information Systems, or a related field.
• Minimum 12 years of professional experience in network and network security, including at least 4 years in architectural roles.
• At least 5 years of proven experience deploying and managing Cisco ACI solutions.
• Mandatory certifications: CCIE Enterprise and CCIE Security (optional: CCDE, cloud security certifications).

Required skills

• Multi‑vendor networking: Cisco, Juniper, Palo Alto, Fortinet, F5 (LTM, WAF, APM, DNS), Huawei.
• Advanced security technologies: NGNGFW, Zero Trust, micro‑segmentation, threat detection, traffic decryption, anti‑DDoS.
• Network automation: Ansible, Python scripting.
• Monitoring and analysis tools: SolarWinds, Cisco DNA Center, SIEM systems, Wireshark.