Network Security Architect - Network Segmentation

I-confidential; City Of London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A financial services company in the UK is seeking a Network Security Architect to design and implement secure network solutions. The role requires extensive knowledge of network security practices and the ability to document and justify design decisions. Candidates should have experience with security assessments and IT transformation projects, along with proficiency in using tools like Jira and Confluence. Competitive compensation is offered with opportunities to engage across various teams in the organization.

Qualifications

• Extensive experience in network security technologies and segmentation.
• Experience in large-scale IT transformation programmes.
• Excellent documentation skills.

Responsibilities

• Collaborate with Security Architecture team and produce detailed artefacts.
• Manage end-to-end solution designs according to requirements.
• Document solutions in line with regulatory expectations.
• Support implementation of the Network Segmentation Target Operating Model.

Skills

Security assessment and threat modelling

Understanding regulatory requirements

BizzDesign or Archi UML visualisation

Working proficiency in Jira

Working proficiency in Confluence

Regulatory compliance

Collaboration

Tools

Jira

Confluence

BizzDesign

UML

Job description

We are currently looking for a Network Security Architect to join an existing team with one of our financial services clients. The role requires experience and technical knowledge of network security, network segmentation and network access control.

Applicants should have experience of working in large-scale IT transformation programmes and excellent documentation skills justifying and explaining security design decisions against threats/mitigation/risk appetite and cost within the solution design document.

Extensive experience and technical knowledge within network security:

• Traditional Data Centre technologies, network segmentation with physical and virtual firewalls and other technologies used in network segmentation, like MPLS/eVPN.
• Software Defined Networking and segmentation within private cloud environments
• Segmentation within Public cloud environments
• Segmentation within containerized environments
• Macro- and micro-segmentation

Skills and Experience

• Security assessment and threat modelling as an input to security design.
• Understanding and interpreting regulatory requirements
• BizzDesign, Archi, or generic UML visualisation experience for high-level designs
• Working proficiency in Jira for project & tasks management
• Working proficiency in Confluence for documentation

Architecture & Design

• Collaborate extensively and align directly with Security Architecture colleagues and produce high quality detailed artefacts
• Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements
• Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process
• Articulate, publish, and ensure approval of any design deviations resulting in technical debt
• Ensure any technical risks or issues arising from a solution design are recorded and mitigated.
• Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes
• Ensures the design of the solutions are efficient, timely and cost effective throughout the project lifecycle
• Clear understanding of both the motivations of the business and technical security
• Promote strong documentation and clerkship
• Conduct multi-layered assessments to identify segmentation opportunities and control gaps at network, platform, and application level.
• Document solution designs in line with regulatory expectations (e.g. DORA), ensuring traceability from policy to control execution, and evidencing control effectiveness.
• Support implementation of the Network Segmentation Target Operating Model, including the definition and improvement of supporting processes related to the Architecture Control.

Engaging with platform and application owners

• Update or create architectural design documents
• Align patterns and standards with actual implementations
• Embed controls into product roadmaps
• Support teams beyond security, acting as a reference point across engineering, architecture, and service operations to ensure cohesive design and implementation.
• Contributing to security governance and assurance by embedding traceable, repeatable, and documented design decisions and other architectural artefacts into the solution delivery lifecycles.

Governance

• Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes
• Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation
• Present publications at technical design authorities for input, feedback, and approval

Risk and Dependency Management

• Effectively manages and escalates both technical and project risks or issues
• Articulates solutions and remediation steps to technical risks & issues
• Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change