IP Network Security Architect

Flint UK Technology Services; Reading; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading technology services provider in the UK seeks an experienced IP Network Security Architect. This role involves supporting TSA-aligned IP architecture, network design, security segmentation, and documentation production. Ideal candidates will have strong knowledge in IP network security, Firewalls, and private cloud integration, as well as relevant degrees and certifications. Competitive salary package offered.

Qualifications

• Proven experience in IP network architecture and security design.
• Strong understanding of network segmentation, Firewalls, VRFs, ACLs, and trust zones.
• Experience with private cloud integration and CNF/VNF workloads.

Responsibilities

• Develop Low‑Level Designs, flow diagrams, routing tables, segmentation plans.
• Deliver TSA IP Security Architecture Blueprints across various domains.
• Design Network Segmentation Models including trust zones and policies.

Skills

IP network architecture and security design

Network segmentation

Firewalls

VRFs

ACLs

Private cloud integration

Analytical skills

Problem-solving

Documentation skills

Education

Bachelor’s degree in Computer Science

Relevant certifications such as CCNP/CCIE, CISSP

Job description

Job Title

IP Network Security Architect

Overview

We are seeking an experienced IP Network Security Architect to support TSA‑aligned IP architecture and security design. The role involves end‑to‑end network design, security segmentation, private cloud integration, and producing detailed architectural documentation to ensure alignment with TSA standards and controls.

Responsibilities

• Develop Low‑Level Designs (LLDs), flow diagrams, routing tables, segmentation plans, and Firewall inputs for secure network implementation.
• Deliver TSA IP Security Architecture Blueprints covering control, data, and management planes across core, RAN, private cloud, and edge domains.
• Design Network Segmentation Models including trust zones, inter‑zone policies, and enforcement mechanisms (Firewalls, VRFs, route leaking, ACLs).
• Create Architectural Interrelation Maps documenting dependencies between PAM/PAW systems, network sensors, scanning platforms, and segmented IP fabrics.
• Design Private Cloud Integration for CNF/VNF workloads, ensuring secure segmentation, traffic visibility, and service mesh/Firewall edge alignment.
• Develop a TSA Control Mapping Matrix (IP Layer) mapping IP network architecture to TSA CoP sections with evidence and assurance artifacts.
• Provide guidance and support for network security implementations and operational handover.

Required Skills & Experience

• Proven experience in IP network architecture and security design.
• Strong understanding of network segmentation, Firewalls, VRFs, ACLs, and trust zones.
• Experience with private cloud integration and CNF/VNF workloads.
• Ability to produce comprehensive LLDs, routing tables, flow diagrams, and architectural documentation.
• Familiarity with TSA CoP controls and compliance mapping is highly desirable.
• Strong analytical, problem‑solving, and documentation skills.

Qualifications

• Bachelor’s degree in Computer Science, Network Engineering, or related field.
• Relevant certifications such as CCNP/CCIE, CISSP, or equivalent preferred.

Soft Skills

• Excellent communication and stakeholder management skills.
• Ability to work independently and collaboratively in a cross‑functional team.