Zero-Trust Network Security Architect (Hybrid/Cloud)

Ian Martin Group; Calgary; Presencial; CAD 88.000 - 125.000; Jornada completa

Descripción de la vacante

The Ian Martin Group is seeking a Network Security Architect for a Calgary-based contract role. You will lead enterprise network segmentation design, policy governance, and multi-year roadmaps toward Zero Trust, spanning on-prem and cloud environments.

Requires deep expertise in microsegmentation, NGFWs (Palo Alto), VMware NSX, Broadcom vDefend, and Azure security services, plus strong documentation and ADR governance.

Formación

• 10+ years of experience in network security architecture, network architecture, or cybersecurity architecture.
• Demonstrated track record designing large-scale enterprise segmentation strategies and governance models.
• Proven experience designing hybrid cloud and data center security architectures for complex enterprise environments.
• Deep understanding of microsegmentation concepts, application-centric design methodologies, and east-west traffic security models.
• Strong knowledge of Zero Trust architecture principles.
• Hands-on architectural design experience with Palo Alto Networks NGFWs, VMware NSX and Broadcom vDefend, and Microsoft Azure networking services.

Responsabilidades

• Lead the design, development, and governance of enterprise network segmentation and security policy frameworks across on-premises data centers and cloud environments.
• Define and document security zones, trust boundaries, communication patterns, and segmentation policies.
• Create future-state network security architecture and reference models.
• Develop security classification models for applications, data, workloads, and environments.
• Create reusable policy design patterns, design authority documentation, and reference architectures.
• Define review and approval processes for segmentation policies and facilitate architecture design workshops.

Conocimientos

Network security architecture

Zero Trust concepts

Architecture documentation

Threat modeling

Herramientas

Palo Alto Networks NGFW

VMware NSX

Broadcom vDefend

Azure networking

Descripción del empleo

The Ian Martin Group is seeking a Network Security Architect for a Calgary-based contract role. You will lead enterprise network segmentation design, policy governance, and multi-year roadmaps toward Zero Trust, spanning on-prem and cloud environments.

Requires deep expertise in microsegmentation, NGFWs (Palo Alto), VMware NSX, Broadcom vDefend, and Azure security services, plus strong documentation and ADR governance.