Senior Network Security Architect

Applied Materials, Inc.; Toronto; On-site; CAD 140,000 - 190,000; Full time

Job summary

Applied Materials, Inc. in Toronto, CAN, seeks a Senior / Principal Network Security Architect to lead the strategy, architecture, and governance of the company’s global network security.

You will define the future-state architecture and roadmap across enterprise, cloud, manufacturing (OT), data center, and remote access, partnering with engineering, cybersecurity, cloud, manufacturing and business leadership.

Qualifications

• Bachelor's degree or related discipline.
• ,
• ],
• job_responsibilities_descriptionplices2
• CoT_job_summary_short
• job_summary_short

Responsibilities

• Define and govern the global network security strategy and architecture.
• ],
• CoT_job_summary_shortκαν
• job_summary_shortstring

Skills

Zero Trust

SSE/SASE

Network Security

Cloud Security

SD-WAN

OT Security

DDoS Protection

NDR

Security Automation

Architecture Leadership

Education

Bachelor's degree in Computer Science/IT/Cybersecurity/Engineering

Tools

Palo Alto

Fortinet

Check Point

SSE/SASE platforms

ZTNA

WAF

NDR tools

Job description

Who We AreApplied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology.What We OfferLocation:Toronto,CANYou’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible—while learning every day in a supportive leading global company. Visit our Careers website to learn more.At Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits .Applied Materials is seeking a highly experienced Senior / Principal Network Security Architect to lead the strategy, architecture, and governance of the company's global network security infrastructure. This role is responsible for defining the future-state architecture and technology roadmap across enterprise, cloud, manufacturing (OT), data center, and remote access environments.The ideal candidate is a recognized technical leader with deep expertise in Zero Trust, SSE/SASE, Network Security, Cloud Security, SD-WAN, OT Security, DDoS Protection, Network Detection & Response (NDR), and Security Automation . This individual will partner with engineering, operations, cybersecurity, cloud, manufacturing, and business leadership teams to design and implement secure, scalable, and resilient solutions that support Applied Materials' global operations and digital transformation initiatives.Key ResponsibilitiesThe Principal Network Security Architect is accountable for defining and governing Applied Materials' global network security strategy and architecture. This role leads the design and modernization of enterprise, cloud, and manufacturing security platforms, ensuring secure, resilient, and scalable services that support business growth, operational excellence, and cybersecurity objectives worldwideEnterprise Security Architecture & StrategyDefine and maintain the enterprise network security architecture vision, standards, and multi-year roadmap.Develop reference architectures, design standards, and technical governance processes.Lead strategic initiatives involving Zero Trust, SASE/SSE, cloud security, SD-WAN, segmentation, and network modernization.Evaluate emerging technologies and recommend adoption strategies aligned with business and cybersecurity objectives.Act as the technical authority for network security architecture decisions across the enterprise.Network Security ArchitectureArchitect and govern global network security solutions, including:Next-Generation Firewalls (Palo Alto, Fortinet, Check Point)Secure Service Edge (SSE/SASE)Zero Trust Network Access (ZTNA)Secure Web Gateway (SWG)Data Loss Prevention (DLP)DNS SecurityWeb Application Firewall (WAF)DDoS ProtectionNetwork Detection & Response (NDR)Establish standards for segmentation, micro-segmentation, and policy enforcement.Ensure consistent security controls across on-premises, cloud, and SaaS environments.Cloud & Hybrid Security ArchitectureDesign secure connectivity patterns for Azure, AWS, and hybrid cloud environments.Architect cloud-native security controls and connectivity frameworks.Govern ExpressRoute, Direct Connect, cloud firewalls, cloud networking, and secure interconnectivity.Develop secure access models for applications, services, partners, and third-party integrations.Manufacturing & OT SecurityDefine and maintain secure network architectures for manufacturing facilities, laboratories, and operational technology environments.Drive IT/OT segmentation aligned with ISA-95, Purdue Model, NIST CSF, and IEC 62443 standards.Design secure remote access, monitoring, and management solutions for manufacturing operations.Partner with factory engineering and cybersecurity teams to identify and mitigate operational risks.Design Governance & Technical LeadershipLead architecture reviews and approve High-Level Designs (HLDs) and Low-Level Designs (LLDs).Chair technical design reviews and architecture governance boards.Mentor engineers and architects on network security best practices and emerging technologies.Establish engineering standards and drive design consistency across regions and business units.Security Risk, Compliance & Incident ResponseEnsure architecture compliance with:NIST Cybersecurity FrameworkNIST 800-53CIS Critical Security ControlsISO 27001IEC 62443PCI DSSConduct architecture risk assessments and threat modeling exercises.Support major cyber incident investigations and post-incident architecture improvements.Partner with Security Operations, SOC, ISRM, and Audit teams to continuously strengthen security posture.Automation & InnovationDrive adoption of Infrastructure-as-Code (IaC), APIs, and security automation.Lead AI-driven operational efficiency initiatives within network and security domains.Develop architectural frameworks for telemetry, observability, and predictive analytics.Promote standardization and simplification to reduce operational complexity and risk.Vendor & Financial ManagementDevelop business cases, TCO analyses, and strategic investment recommendations.Lead vendor evaluations, proof-of-concepts, and technology selection initiatives.Manage strategic vendor relationships and influence future product capabilities.Support licensing, contract renewals, and budget planning activities.Leadership ExpectationsRecognized subject matter expert and technical leader.Influences executive, business, and technical stakeholders across organizational boundaries.Drives enterprise-wide architectural decisions and technology strategy.Balances security, operational excellence, business agility, and cost optimization.Mentors senior engineers and architects while fostering innovation and engineering excellence.Minimum QualificationsBachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related discipline.12+ years of experience in enterprise networking and security.5+ years of experience in architecture, principal engineering, or technical leadership roles.Proven experience designing and implementing large-scale enterprise security architectures.Strong knowledge of:Zero Trust ArchitectureNetwork Security and FirewallsSSE/SASE PlatformsSD-WANRouting & SwitchingCloud SecurityDNS, PKI, and Identity IntegrationNetwork Detection & Response (NDR)Preferred QualificationsGlobal enterprise and manufacturing industry experience.Experience supporting semiconductor, industrial, or operational technology environments.Expertise with:Palo Alto NetworksZscalerAkamaiExtraHop/Corelight/VectraClearPass/ForescoutAzure and AWS NetworkingExperience leading globally distributed engineering teams.Preferred CertificationsCISSPCCIE Enterprise Infrastructure/SecurityCCNP EnterprisePalo Alto PCNSEAzure Security Engineer AssociateAWS Security SpecialtyCCSPZscaler Certified ArchitectAdditional InformationTime Type:Full timeEmployee Type:Assignee / RegularTravel:Yes, 10% of the TimeRelocation Eligible:NoApplied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.