Network Security Architect

Good co India; United Arab Emirates; On-site; AED 260,000 - 480,000; Full time

Job summary

Good co India is seeking an experienced Enterprise Network Security Architect to design, implement, and maintain secure network architectures across on-premises, cloud, and hybrid environments. You will lead the deployment of next‑generation firewalls, IDS/IPS, WAF, VPN, NAC and other security controls while ensuring compliance with ISO 27001, NIST, PCI DSS and related standards.

The role requires deep expertise in cloud networking, Zero Trust, SD‑WAN security, threat modeling, incident

Qualifications

• Design, implement, and maintain enterprise network security architecture.
• Experience in on-premises, cloud and hybrid networks.

Responsibilities

• Design, implement, and maintain enterprise network security architecture aligned with cybersecurity standards.
• Develop secure network architecture strategies for on-premises, cloud and hybrid environments.
• Lead deployment of firewalls, IDS/IPS, WAF, VPN, NAC and other security controls.

Skills

Network security

Security architecture

Zero Trust

Cloud security

SIEM/SOAR

Threat modeling

Incident response

Vulnerability management

Leadership

Vendor management

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, Network Engineering or related field

Tools

Palo Alto

Fortinet

Check Point

Cisco ASA/Firepower

Juniper SRX

Job description

Role & responsibilities

• Design, implement, and maintain enterprise network security architecture aligned with business requirements and cybersecurity standards.
• Develop secure network architecture strategies covering on-premises, cloud, and hybrid environments.
• Design and deploy security solutions including next-generation firewalls, IDS/IPS, WAF, VPN, NAC, proxy, DDoS protection, and secure access solutions.
• Define network security standards, policies, reference architectures, and governance frameworks.
• Architect secure connectivity solutions including LAN/WAN, SD-WAN, VPN, cloud networking, and remote access environments.
• Perform security architecture reviews, risk assessments, threat modeling, and design validation for network infrastructure changes.
• Lead implementation and optimization of firewall platforms such as Palo Alto, Fortinet, Check Point, Cisco, and Juniper security solutions.
• Design and implement Zero Trust Network Access (ZTNA), network segmentation, micro‑segmentation, and least‑privilege access controls.
• Collaborate with cloud, infrastructure, application, and security teams to integrate network security controls across AWS, Azure, and GCP environments.
• Implement security monitoring, logging, and threat detection using SIEM/SOAR platforms such as Splunk, Microsoft Sentinel, and IBM QRadar.
• Analyze network security events, investigate incidents, and support incident response and threat mitigation activities.
• Support vulnerability assessments, penetration testing, compliance audits, and remediation initiatives.
• Ensure compliance with security frameworks and standards including ISO 27001, NIST, CIS Controls, PCI DSS, and organizational security policies.
• Evaluate emerging network security technologies and recommend improvements to enhance security posture.
• Develop network security documentation including architecture diagrams, policies, procedures, and operational runbooks.
• Provide technical leadership, mentorship, and guidance to network security engineers and operations teams.
• Work with vendors and stakeholders to evaluate solutions, conduct proof of concepts (PoCs), and manage security projects.

Preferred candidate profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, Electronics & Communication Engineering, or a related technical discipline.
• 8 to 13 years of experience in Network Security, Cybersecurity Engineering, Security Architecture, or Enterprise Network Infrastructure roles.
• Strong experience designing and implementing enterprise network security architectures across on-premises, cloud, and hybrid environments.
• Hands‑on expertise with next‑generation firewalls, IDS/IPS, WAF, VPN, NAC, DDoS protection, and secure network technologies.
• Strong experience with security platforms such as Palo Alto Networks, Fortinet, Check Point, Cisco ASA/Firepower, and Juniper SRX.
• Deep understanding of network protocols and technologies including TCP/IP, routing, switching, BGP, OSPF, DNS, DHCP, VLANs, and network segmentation.
• Experience designing Zero Trust Architecture, micro‑segmentation, SASE, SD‑WAN security, and secure remote access solutions.
• Strong knowledge of cloud network security across AWS, Microsoft Azure, and Google Cloud environments.
• Experience with SIEM, SOAR, threat detection, incident response, and security monitoring platforms.
• Familiarity with Splunk, Microsoft Sentinel, IBM QRadar, vulnerability scanners, and network traffic analysis tools.
• Strong understanding of security frameworks including ISO 27001, NIST CSF, CIS Controls, PCI DSS, and risk management practices.
• Experience with security architecture reviews, threat modeling, compliance assessments, and security documentation.
• Knowledge of scripting and automation using Python, PowerShell, or Bash is preferred.
• Strong analytical, troubleshooting, communication, stakeholder management, and technical leadership skills.
• Experience working with global teams, vendors, auditors, and enterprise customers.

Preferred certifications

• CISSP
• CCSP
• CISM
• CCNP Security
• PCNSE (Palo Alto Networks Certified Network Security Engineer)
• Fortinet Certified Solution Specialist (FCSS)
• Check Point Certified Security Expert
• AWS Certified Security Specialty
• Microsoft Certified: Cybersecurity Architect Expert
• TOGAF Certified Enterprise Architect
• SABSA Security Architect Certification
• ISO 27001 Lead Auditor / Lead Implementer