Remote Network Security Architect — PAM & Telco Networking

ECS Resource Group; United Kingdom; Remote; GBP 83,000 - 92,000; Part time

Job summary

ECS Resource Group is seeking a Network Cyber Security Architect for a fully remote contract role in the UK. The position focuses on security architecture with emphasis on Privileged Access Management (PAM) across complex network environments, within a large telecoms programme.

The architect will review designs, define controls, and ensure designs meet security, regulatory, and architecture standards while maintaining least privilege and secure management access. Fully remote with outside IR35.

Qualifications

• Experience in security architecture across large-scale networks.
• Strong PAM and privileged-access management experience.
• Telecoms or service-provider networking background desirable.

Responsibilities

• Provide security architecture and assurance across PAM and network management environments.
• Review network and security designs, identifying risks, gaps and dependencies.
• Define security controls and privileged-access requirements.
• Review and assure HLDs, LLDs, PoCs, test strategies and implementation plans.
• Provide recommendations around network segmentation, least privilege and secure management access.
• Support architecture governance, workshops and technical decision-making.
• Document security risks, exceptions, recommendations and remediation requirements.

Skills

Network Security Architecture

IP Networking

PAM / Privileged Access Management

AAA, TACACS+, MFA, RBAC

Network Management Systems

Job description

ECS Resource Group is seeking a Network Cyber Security Architect for a fully remote contract role in the UK. The position focuses on security architecture with emphasis on Privileged Access Management (PAM) across complex network environments, within a large telecoms programme.

The architect will review designs, define controls, and ensure designs meet security, regulatory, and architecture standards while maintaining least privilege and secure management access. Fully remote with outside IR35.