DMZ Senior Architect

GDH; Charlotte (NC); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

GDH seeks a senior Enterprise Network Security Architect to design and implement enterprise perimeter, external connectivity, and DMZ architectures across internet, cloud, and hybrid environments. You will establish architectural strategies, target-state designs, and roadmaps aligned with Zero Trust and security requirements.

You will lead cross-functional discussions with infrastructure, security, development, and business teams, mentor engineers, and ensure scalable, observable, and compliant

Qualifications

• 15+ years of progressive experience in network engineering and security architecture.
• 10+ years designing enterprise-scale network and security architectures within complex environments.
• Experience developing architectural strategies, target-state designs, reference architectures, and technology roadmaps.
• Experience with cloud networking and security across Azure, AWS, and Google Cloud environments.
• Strong knowledge of Zero Trust principles, perimeter security, external connectivity, DMZ architecture, segmentation, and network automation.
• Certifications such as CISSP, CCIE, AWS Certified Security – Specialty preferred.

Responsibilities

• Develop and maintain architectural strategies and technology roadmaps for enterprise perimeter services, external connectivity, and DMZ environments.
• Define target-state designs, reference architectures, and reusable design patterns for securely exposing applications and APIs.
• Evaluate emerging technologies, cloud-native security architectures, and network automation capabilities to support modernization and security improvements.
• Lead architecture and solution discussions across cross-functional teams to support scalability, flexibility, resilience, and operational readiness.
• Design secure and observable solutions for internet-facing workloads and partner, third-party, cloud, and hybrid connectivity.
• Provide architectural guidance for Zero Trust capabilities, including identity-aware access, segmentation, and microsegmentation.
• Provide technical leadership to infrastructure, security, and development teams regarding network and security architecture standards.
• Document architectural decisions, technical tradeoffs, dependencies, and risks and communicate complex concepts to stakeholders.
• Mentor architects and engineers and promote consistent architecture and engineering best practices.
• Support adherence to applicable security, regulatory, operational, and governance requirements.

Skills

Enterprise network security

Architecture leadership

Cross-functional collaboration

Zero Trust

Education

CISSP

CCIE

AWS Certified Security – Specialty

Tools

Azure

AWS

Google Cloud

Job description

Role Summary

This senior-level position designs and implements enterprise network security and connectivity architectures, with a focus on perimeter security, external connectivity, and modern DMZ environments. The role establishes architectural strategies, target-state designs, and technology roadmaps for securely exposing applications and APIs across internet, cloud, and hybrid environments. This position collaborates with infrastructure, security, development, and business teams to deliver scalable, resilient solutions aligned with Zero Trust principles and applicable security requirements.

Responsibilities

• Develop and maintain architectural strategies and technology roadmaps for enterprise perimeter services, external connectivity, and DMZ environments.
• Define target-state designs, reference architectures, and reusable design patterns for securely exposing applications and APIs.
• Evaluate emerging technologies, cloud-native security architectures, and network automation capabilities to support modernization and security improvements.
• Lead architecture and solution discussions across cross-functional teams to support scalability, flexibility, resilience, and operational readiness.
• Design secure and observable solutions for internet-facing workloads and partner, third-party, cloud, and hybrid connectivity.
• Provide architectural guidance for Zero Trust capabilities, including identity-aware access, segmentation, and microsegmentation.
• Provide technical leadership to infrastructure, security, and development teams regarding network and security architecture standards.
• Document architectural decisions, technical tradeoffs, dependencies, and risks and communicate complex concepts to stakeholders.
• Mentor architects and engineers and promote consistent architecture and engineering best practices.
• Support adherence to applicable security, regulatory, operational, and governance requirements.

Qualifications

• 15+ years of progressive experience in network engineering, security architecture, cybersecurity, or a related field.
• 10+ years of experience designing enterprise-scale network and security architectures within complex environments.
• Experience developing architectural strategies, target-state designs, reference architectures, and technology roadmaps.
• Experience with cloud networking and security across Azure, AWS, and Google Cloud environments.
• Strong knowledge of Zero Trust principles, perimeter security, external connectivity, DMZ architecture, segmentation, and network automation.
• Demonstrated ability to lead through influence, build stakeholder alignment, and communicate technical concepts clearly.
• Experience mentoring technical professionals and advancing architecture and engineering standards.
• Ability to operate effectively as a senior individual contributor and collaborate across technical and business teams.
• Certifications such as CISSP, CCIE, AWS Certified Security – Specialty, or comparable credentials are preferred.
• Relevant education, training, certifications, or equivalent practical experience in cybersecurity, networking, or a related discipline.
• Must be authorized to work in the location where the position is based.

Publishing Pay Range: $140,000.00 – $200,000.00 annually

This position offers a hybrid schedule, with time split between the office and remote work.