Global Network Security Architecture Lead

Boston Consulting Group (BCG); Lisboa; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

Boston Consulting Group is seeking an Infrastructure Security Architect – Secure Network to define security strategy across SSE, ZTNA, DNS, and cloud networking for BCG’s global network.

The role reports to ISRM and collaborates with Platform Engineering and Security Operations to shape governance, standards, and deployment patterns while guiding secure, scalable solutions with a Zero Trust approach.

Qualifications

• Bachelor’s degree in a relevant field or equivalent practical experience.
• 6–10 years in security architecture, security engineering, or infrastructure security with architecture responsibility.
• Experience in large, audit-sensitive environments with governance processes.
• Strong knowledge of zero trust architecture and hybrid cloud environments.
• Experience with SSE platforms such as Zscaler or Prisma Access and ZTNA design.

Responsibilities

• Define and maintain network security architecture for the enterprise: SSE, ZTNA, secure web gateway, and CASB patterns.
• Own architectural requirements for SSE platform aligned with security standards.
• Define network segmentation and zoning across offices, data centers, and cloud environments.
• Define DNS and web-layer security architecture requirements and egress control.
• Own security architecture requirements for cloud network infrastructure and secure interconnects.
• Define secure remote access architecture (ZTNA/VPN) and deprecation path for legacy access.
• Author and maintain security standards and control requirements for the Secure Network domain.
• Conduct security architecture reviews and document dispositions and decisions.
• Contribute to ZTMM maturity assessments and roadmaps.
• Collaborate with Secure Network Engineering Squad and governance teams.
• Define logging, telemetry, and monitoring requirements for secure network services.

Skills

Zero Trust

Security Architecture

Governance

Hybrid Cloud

Education

Bachelor’s degree

Tools

Zscaler

Palo Alto Prisma Access

Job description

Boston Consulting Group is seeking an Infrastructure Security Architect – Secure Network to define security strategy across SSE, ZTNA, DNS, and cloud networking for BCG’s global network.

The role reports to ISRM and collaborates with Platform Engineering and Security Operations to shape governance, standards, and deployment patterns while guiding secure, scalable solutions with a Zero Trust approach.