Hybrid NYC Network Security Architect Zero-Trust

Sensiple Inc.; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Sensiple Inc. is seeking a Network Security Architect in New York City with a hybrid work arrangement for a long-term contract. The role focuses on security architecture, risk assessment, access control, and data protection across LANs, WANs, and multi-clouds.

Candidate should demonstrate expertise in NGFWs, SIEM/EDR, and SABSA/TOGAF-style governance, plus scripting in Python or PowerShell to automate provisioning and logging.

Qualifications

• Experience designing secure network architectures across LAN/WAN and multi-clouds.
• Ability to implement MFA, SSO, PKI, RBAC, and data-in-transit encryption.
• Familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF frameworks.

Responsibilities

• Design and deliver secure network architectures using trust domain segregation, Zero Trust Architecture (ZTA), and secure zoning principles.
• Develop integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments.
• Establish baseline configurations for network infrastructure, including NGFWs, IDS/IPS, and NAC.
• Conduct routine gap analyses and security risk assessments against recognized frameworks like NIST, SANS, and CIS.
• Evaluate proposed acquisitions and software interfaces to determine impact on security posture.
• Plan and oversee regular vulnerability scanning, penetration testing, and ethical hacking exercises.

Skills

IP routing

MPLS

BGP

SD-WAN

Wireless networks

Data center architectures

Checkpoint NGFW

Palo Alto NGFW

Cisco NGFW

SIEM platforms

EDR solutions

AWS

Azure

GCP

Python

PowerShell

Education

CISSP or CISSP-ISSAP

CCIE or CCDP

CISM or SABSA

Tools

SIEM monitoring platforms

EDR solutions

Job description

Sensiple Inc. is seeking a Network Security Architect in New York City with a hybrid work arrangement for a long-term contract. The role focuses on security architecture, risk assessment, access control, and data protection across LANs, WANs, and multi-clouds.

Candidate should demonstrate expertise in NGFWs, SIEM/EDR, and SABSA/TOGAF-style governance, plus scripting in Python or PowerShell to automate provisioning and logging.