Hands-On Network Security Architect (Azure & Zero Trust)

Ryder System, Inc.; Annapolis (MD); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health and welfare benefits

401(k) retirement plan

Paid time off

Job summary

Ryder System, Inc. is seeking a Network Security Architect to design and implement our network security architecture, spanning firewall policy, segmentation, Zero Trust, and cloud networking in Microsoft Azure. You will stay engaged through implementation alongside engineering, not merely hand off a design.

Position reports to the Director of Security Architecture and Engineering within the CISO Office. You will document configurations, lead migrations, and advise IT and business partners on

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Seven (7) years or more Experience in an Information Security Architect role required
• Seven (7) years or more Experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.) required
• Network technologies including protocols, design concepts, and access control advanced required
• Security technologies including encryption, data protection, access privileges advanced required
• Knowledge of Microsoft Windows and Linux systems intermediate required
• Knowledge of both regular expressions (regex) and JSON intermediate required
• Other Information Security Certification (CISSP, GIAC, etc.)
• Experience using APIs
• Experience with CloudFormation, Terraform, Azure Resource Manager, or GCP Cloud Deployment Manager Templates
• In-depth experience in one or more CSPs (Azure, AWS, GCP) installation/configuration and administration of security features
• Expertise in architecting and working in a DevSecOps environment
• Security skills should include access control, runtime defense/anti-malware, and vulnerability management
• Experience working with internal business customers, architecting deployments and troubleshooting infrastructure security products
• One or more Palo Alto Network certifications required (PCNSA, PCNSE, PCCSE, PCSAE)

Responsibilities

• Designs network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure.
• Leads technical migrations end to end: assesses the current environment, designs the target state, builds the configuration, and manages the cutover.
• Works directly alongside engineering through the build and implementation phase, closing the gap between architecture and engineering.
• Reviews existing network security architecture, identifies gaps, and designs remediation including hands-on work to resolve legacy configurations.
• Assesses, scopes, and estimates work and hours required to deliver security architecture components of larger projects.
• Serves as technical expert and trusted advisor to engineering, IT, and business partners on network security design questions.
• Documents and diagrams architecture in both conceptual and physical form, including underlying configuration.
• Works RSA tickets and related efforts in ServiceNow.
• Stays current on emerging network security technologies and threats and integrates them as needed.

Skills

Network security design

Firewall/security config

Zero Trust

Cloud networking (Azure)

End-to-end migrations

Engineering collaboration

Security governance

Strong communication

Documentation of architecture

Education

Bachelor's degree in Computer Science/Information Security

Tools

CloudFormation

Terraform

Azure Resource Manager

GCP Cloud Deployment Manager

Palo Alto certifications (PCNSA/PCNSE/PCCSE/PCSAE)

Job description

Ryder System, Inc. is seeking a Network Security Architect to design and implement our network security architecture, spanning firewall policy, segmentation, Zero Trust, and cloud networking in Microsoft Azure. You will stay engaged through implementation alongside engineering, not merely hand off a design.

Position reports to the Director of Security Architecture and Engineering within the CISO Office. You will document configurations, lead migrations, and advise IT and business partners on