Senior Network Security Architect

Applied Materials, Inc.; Toronto; On-site; CAD 130,000 - 190,000; Full time

Job summary

Applied Materials in Toronto, ON, is seeking a Senior / Principal Network Security Architect to lead the strategy, architecture, and governance of the company's global network security infrastructure. You will guide modernization across enterprise, cloud, and manufacturing security platforms to enable secure, scalable services worldwide.

The ideal candidate brings 12+ years in enterprise networking and security, with deep experience in Zero Trust, SSE/SASE, and cloud security, and a proven track

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related discipline.
• 12+ years of experience in enterprise networking and security.
• 5+ years in architecture, principal engineering, or technical leadership roles.
• Proven experience designing large-scale enterprise security architectures.
• Strong knowledge of Zero Trust, SSE/SASE, SD-WAN, and related security technologies.

Responsibilities

• Define and govern the enterprise network security strategy and architecture for global operations.
• Lead design and modernization of security platforms across on-prem, cloud, and manufacturing environments.
• Establish standards for segmentation, policy enforcement, and risk management.
• Mentor engineers and drive design governance across regions and business units.
• Align security initiatives with NIST CSF, ISO 27001, and IEC 62443 standards.

Skills

Zero Trust

SSE/SASE

ZTNA

NDR

Cloud Security

WAF

DLP

Networking

ISA-95

NIST CSF

Education

Bachelor's degree in Computer Science or related

Tools

Palo Alto

Fortinet

ZTNA/SD-WAN

Azure AWS Networking

Job description

Who We Are

Applied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world’s technology.

What We Offer

Location: Toronto,CAN You’ll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible—while learning every day in a supportive leading global company. Visit our Careers website to learn more. At Applied Materials, we care about the health and wellbeing of our employees. We’re committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our benefits. Applied Materials is seeking a highly experienced Senior / Principal Network Security Architect to lead the strategy, architecture, and governance of the company's global network security infrastructure.

Key Responsibilities

The Principal Network Security Architect is accountable for defining and governing Applied Materials' global network security strategy and architecture. This role leads the design and modernization of enterprise, cloud, and manufacturing security platforms, ensuring secure, resilient, and scalable services that support business growth, operational excellence, and cybersecurity objectives worldwide.

Enterprise Security Architecture & Strategy

Define and maintain the enterprise network security architecture vision, standards, and multi-year roadmap. Develop reference architectures, design standards, and technical governance processes. Lead strategic initiatives involving Zero Trust, SASE/SSE, cloud security, SD-WAN, segmentation, and network modernization. Evaluate emerging technologies and recommend adoption strategies aligned with business and cybersecurity objectives. Act as the technical authority for network security architecture decisions across the enterprise.

Network Security Architecture

• Next-Generation Firewalls (Palo Alto, Fortinet, Check Point)
• Secure Service Edge (SSE/SASE)
• Zero Trust Network Access (ZTNA)
• Secure Web Gateway (SWG)
• Data Loss Prevention (DLP)
• DNS Security
• Web Application Firewall (WAF)
• DDoS Protection
• Network Detection & Response (NDR)

Establish standards for segmentation, micro-segmentation, and policy enforcement. Ensure consistent security controls across on-premises, cloud, and SaaS environments.

Cloud & Hybrid Security Architecture

Design secure connectivity patterns for Azure, AWS, and hybrid cloud environments. Architect cloud-native security controls and connectivity frameworks. Govern ExpressRoute, Direct Connect, cloud firewalls, cloud networking, and secure interconnectivity. Develop secure access models for applications, services, partners, and third-party integrations.

Manufacturing & OT Security

Define and maintain secure network architectures for manufacturing facilities, laboratories, and operational technology environments. Drive IT/OT segmentation aligned with ISA-95, Purdue Model, NIST CSF, and IEC 62443 standards. Design secure remote access, monitoring, and management solutions for manufacturing operations. Partner with factory engineering and cybersecurity teams to identify and mitigate operational risks.

Design Governance & Technical Leadership

Lead architecture reviews and approve High-Level Designs (HLDs) and Low-Level Designs (LLDs). Chair technical design reviews and architecture governance boards. Mentor engineers and architects on network security best practices and emerging technologies. Establish engineering standards and drive design consistency across regions and business units.

Security Risk, Compliance & Incident Response

Ensure architecture compliance with: NIST Cybersecurity Framework NIST 800-53 CIS Critical Security Controls ISO 27001 IEC 62443 PCI DSS. Conduct architecture risk assessments and threat modeling exercises. Support major cyber incident investigations and post-incident architecture improvements. Partner with Security Operations, SOC, ISRM, and Audit teams to continuously strengthen security posture.

Automation & Innovation

Drive adoption of Infrastructure-as-Code (IaC), APIs, and security automation. Lead AI-driven operational efficiency initiatives within network and security domains. Develop architectural frameworks for telemetry, observability, and predictive analytics. Promote standardization and simplification to reduce operational complexity and risk.

Vendor & Financial Management

Develop business cases, TCO analyses, and strategic investment recommendations. Lead vendor evaluations, proof-of-concepts, and technology selection initiatives. Manage strategic vendor relationships and influence future product capabilities. Support licensing, contract renewals, and budget planning activities.

Leadership Expectations

Recognized subject matter expert and technical leader. Influences executive, business, and technical stakeholders across organizational boundaries. Drives enterprise-wide architectural decisions and technology strategy. Balances security, operational excellence, business agility, and cost optimization. Mentors senior engineers and architects while fostering innovation and engineering excellence.

Minimum Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related discipline. 12+ years of experience in enterprise networking and security. 5+ years of experience in architecture, principal engineering, or technical leadership roles. Proven experience designing and implementing large-scale enterprise security architectures. Strong knowledge of: Zero Trust Architecture Network Security and Firewalls SSE/SASE Platforms SD-WAN Routing & Switching Cloud Security DNS, PKI, and Identity Integration Network Detection & Response (NDR).

Preferred Qualifications

Global enterprise and manufacturing industry experience. Experience supporting semiconductor, industrial, or operational technology environments. Expertise with: Palo Alto Networks Zscaler Akamai ExtraHop/Corelight/Vectra ClearPass/Forescout Azure and AWS Networking Experience leading globally distributed engineering teams. Preferred Certifications CISSP CCIE Enterprise Infrastructure/Security CCNP Enterprise Palo Alto PCNSE Azure Security Engineer Associate AWS Security Specialty CCSP Zscaler Certified Architect

Additional Information

Time Type: Full time Employee Type: Assignee / Regular Travel: Yes, 10% of the Time Relocation Eligible: No

Applied Materials is an Equal Opportunity Employer.

Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.

Cookies are small text files stored on your device that help the website function correctly. Our website uses only cookies that are strictly necessary to operate and to provide services explicitly requested by the user. These cookies cannot be switched off in our systems and do not track browsing behavior or collect data for analytics, advertising, or marketing purposes.