Internal Perimeter Security Architect

The Judge Group; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

The Judge Group is seeking a Senior Security Architect to lead modernization of enterprise security architecture with a focus on Network Security, Zero Trust, Microsegmentation, AWS Security, and AI-driven Security Operations. This role aims to transform security from a point-in-time review into a continuous engineering function capable of defending against AI-accelerated threats.

Responsibilities include designing enterprise network security across on-premises, hybrid, and cloud environments;

Qualifications

• 8+ years of experience in Security Architecture or related field.
• Deep expertise in enterprise network security architecture and engineering.
• Hands-on experience with Zero Trust and microsegmentation strategies.
• Experience securing AWS cloud environments and hybrid infrastructures.

Responsibilities

• Design and evolve enterprise network security architectures across on-premises, hybrid, and cloud environments.
• Lead network security engineering initiatives, including segmentation and secure connectivity.
• Design and implement Zero Trust architectures with least-privilege access and continuous verification.
• Lead microsegmentation programs to reduce lateral movement.
• Architect and secure AWS environments with VPC, IAM, Security Groups, and related services.
• Design, optimize, and govern next-generation firewall architectures and policies.
• Conduct architecture reviews and develop remediation roadmaps.
• Map findings to MITRE ATT&CK for improved threat visibility and defense.
• Collaborate with infrastructure, cloud, and engineering teams to embed security in deployments.

Skills

Security Architecture

Network Security

Zero Trust

Microsegmentation

AWS Security

Firewall Engineering

AI Security

Threat Modeling

MITRE ATT&CK

Automation

Threat Detection

Tools

Palo Alto

Check Point

Fortinet

Cisco Firepower

AWS Network Firewall

Job description

We are seeking a Senior Security Architect to lead the modernization of enterprise security architecture with a focus on Network Security Architecture, Zero Trust, Microsegmentation, AWS Security, Firewall Engineering, and AI-driven Security Operations. This role will transform security from a point-in-time review process into a continuous engineering function capable of defending against modern and AI-accelerated threats.

Key Responsibilities

• Design and evolve enterprise network security architectures across on-premises, hybrid, and cloud environments.
• Lead network security engineering initiatives, including segmentation, traffic flow optimization, secure connectivity, and boundary protection.
• Design and implement Zero Trust architectures that enforce least-privilege access and continuous verification.
• Lead microsegmentation programs to reduce lateral movement and minimize attack blast radius.
• Architect and secure AWS environments, including VPC design, IAM, Security Groups, Transit Gateway, AWS Network Firewall, GuardDuty, and Security Hub.
• Design, optimize, and govern next-generation firewall architectures, policies, and internal security controls.
• Conduct network architecture reviews, analyze high-risk trust relationships, and develop phased remediation roadmaps.
• Perform attack-path analysis and implement controls that strengthen network segmentation and access governance.
• Leverage AI-augmented security tooling to accelerate architecture reviews, threat detection, vulnerability identification, and remediation efforts.
• Map findings to Mythos-specific Tactics, Techniques, and Procedures (TTPs) to improve threat visibility, early warning capabilities, and defensive coverage across security domains.
• Partner with infrastructure, cloud, and engineering teams to embed security into network, platform, and deployment architectures.

Required Experience

• 8+ years of experience in Security Architecture, Network Security Engineering, or Cybersecurity Engineering.
• Deep expertise in enterprise network security architecture and engineering.
• Strong knowledge of routing, switching, network design, security zoning, and secure network connectivity.
• Hands-on experience implementing Zero Trust and microsegmentation strategies.
• Expertise securing AWS cloud environments and hybrid infrastructures.
• Experience with enterprise firewall technologies including Palo Alto, Check Point, Fortinet, Cisco Firepower, or AWS Network Firewall.
• Strong understanding of network segmentation, trust boundaries, attack-path reduction, and lateral movement prevention.
• Experience with AI-assisted security tools, automation, and security engineering workflows.
• Familiarity with MITRE ATT&CK, TTP mapping, threat modeling, and detection engineering.