Network Architect

Avance Consulting; Coventry; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading consulting firm is seeking a skilled Network Security Architect to enhance its internal Security Strategy and Architecture team. The role involves designing robust network solutions, guiding delivery teams, and ensuring alignment with architectural standards. This position is pivotal for delivering high-quality projects across multiple platforms emphasizing security and efficiency.

Qualifications

• Understanding of network architecture and tools essential.
• Knowledge of hybrid cloud networks and Operational Technology is beneficial.
• Experience in designing segmentation and next-gen firewall solutions.

Responsibilities

• Collaborate with the Security Strategy and Architecture team for project deliveries.
• Research techniques, produce design documents, and represent designs at governance bodies.
• Provide guidance to teams on implementations and ensure alignment with architectural designs.

Skills

Network architecture

Hybrid cloud networks

Operational Technology (OT) networks

Macro/micro segmentation design

Network Access Control (NAC)

Zero Trust Network Access (ZTNA)

Next-generation firewall design

Job description

Report this job

What is the problem? *

• Incorrect company
• Incorrect location
• Job is expired
• Job may be a scam
• Other

The Network Security Architect will consider the HD architecture and the culture of the organisation along with the operating model and factor this into their solution selection and design.

They will challenge themselves to strive to find the right solution and not deliver the textbook happy-path solution.

The Network Security Architect will look at the wider network security roadmap and network roadmap and look at how their solution sits within that wider architecture, challenging the need and the approach taken for their solution, seeking efficiencies with wider changes to consolidate technology platforms, delivery, and reordering delivery.

Examples of considerations would include:

• Should the customer deploy NAC as a unique platform or consolidate with Universal ZTNA to deliver NAC in a more strategic way, assuming physical NAC services are still deemed necessary?
• Look at tolling to simplify the micro-segmentation approach for a hybrid cloud/on-prem and IT/OT enterprise (for delivery and management) — also how we can use tooling for data flow mapping?
• With Segmentation and ZTNA, does the customer even need NAC in the corporate environment?
• The customer has CAB already deployed outside of the standard SSE stack and a SWG from a core SSE provider, but consolidation to a single vendor SSE brings advantages but also challenges. Across wider technology, we are looking to SDWAN, so can we consolidate to a single vendor SASE, or is that a step too far with too much change and compromise?
• With the SD-WAN delivery outside of our programme, how do we address the SASE security risks, and how can we leverage their delivery to deliver ZTA capability?

Key responsibilities:

To work as a member of the internal Security Strategy and Architecture team (resource augmentation) assigned to work 100% on delivery programmes.

Responsible for researching solutions and writing solution options reports, creating high-level designs (business-focused), low-level designs (technology-focused), costing solutions, representing designs at governance bodies for approval (e.g., design authority), providing advice/guidance to delivery teams on implementation, and performing architectural governance to ensure delivery aligns with the design. The Architect will be assigned to multiple projects and report to a Senior Security Architect.

Key skills/knowledge/experience:

• Understanding of network architecture and tools
• Knowledge of hybrid cloud networks (On-Prem and Multi-Cloud)
• Knowledge of OT networks
• Experience designing macro and micro segmentation for both on-premise and cloud networks
• Experience designing Network Access Control solutions
• Experience designing Zero Trust Network Access (ZTNA) services for external and internal access
• Experience with next-generation firewall design
• Ideally, experience in Operational Technology network design

* Free services are subject to limitations