Network Security Architect

Sensiple Inc.; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Sensiple Inc. is seeking a Network Security Architect in New York City with a hybrid work arrangement for a long-term contract. The role focuses on security architecture, risk assessment, access control, and data protection across LANs, WANs, and multi-clouds.

Candidate should demonstrate expertise in NGFWs, SIEM/EDR, and SABSA/TOGAF-style governance, plus scripting in Python or PowerShell to automate provisioning and logging.

Qualifications

• Experience designing secure network architectures across LAN/WAN and multi-clouds.
• Ability to implement MFA, SSO, PKI, RBAC, and data-in-transit encryption.
• Familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF frameworks.

Responsibilities

• Design and deliver secure network architectures using trust domain segregation, Zero Trust Architecture (ZTA), and secure zoning principles.
• Develop integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments.
• Establish baseline configurations for network infrastructure, including NGFWs, IDS/IPS, and NAC.
• Conduct routine gap analyses and security risk assessments against recognized frameworks like NIST, SANS, and CIS.
• Evaluate proposed acquisitions and software interfaces to determine impact on security posture.
• Plan and oversee regular vulnerability scanning, penetration testing, and ethical hacking exercises.

Skills

IP routing

MPLS

BGP

SD-WAN

Wireless networks

Data center architectures

Checkpoint NGFW

Palo Alto NGFW

Cisco NGFW

SIEM platforms

EDR solutions

AWS

Azure

GCP

Python

PowerShell

Education

CISSP or CISSP-ISSAP

CCIE or CCDP

CISM or SABSA

Tools

SIEM monitoring platforms

EDR solutions

Job description

Sensiple Inc is a New Jersey corporation with over two decades of expertise in technology-driven solutions specialising in Customer Experience, Contact Center Solutions, Digital Transformation, Cloud Computing & Independent Testing.

With an expert team that has enriched experience in executing & developing sustainable IT strategies in Healthcare, Technology, Retail, Logistics, Education, Telecommunications, Government and Media, we help our diverse customers to envision the future.

By developing highly scalable and consistent solutions, our primary goal is to deliver excellence at all levels and delight our customers and drive them to a better future.

Network Security Architect

New York City, NY (Hybrid)

Long Term Contract

Responsibilities

Security Architecture & Strategy Design

• Design and deliver comprehensive, secure network frameworks using trust domain segregation, Zero Trust Architecture (ZTA), and secure zoning principles.
• Develop technical solutions and integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments.
• Establish baseline configurations for network infrastructure, including Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Network Access Control (NAC).

Risk Assessment & Vulnerability Management

• Conduct routine gap analyses and security risk assessments against recognized frameworks like NIST, SANS, and CIS.
• Evaluate proposed acquisitions and software interfaces to determine how they impact the organization's overarching network security posture.
• Plan and oversee regular vulnerability scanning, penetration testing, and ethical hacking exercises.

Access Control & Data Protection

• Define and implement secure identity federation, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Public Key Infrastructure (PKI) systems.
• Enforce Role-Based Access Control (RBAC) to limit network access strictly by corporate necessity and specific employee roles.
• Architect data-in-transit encryption paths (IPsec/SSL VPNs) and Data Loss Prevention (DLP) parameters to mitigate data leakage.

Required Technical Skills & Knowledge

• Proficient in IP routing, MPLS, BGP, SD-WAN, Wireless networks, and advanced data center architectures.
• Extensive experience deploying Checkpoint, Palo Alto, or Cisco NGFWs, SIEM monitoring platforms, and Endpoint Detection and Response (EDR) solutions.
• Hands-on experience mapping secure network perimeters inside AWS, Azure, or Google Cloud Platform (Google Cloud Platform) environments.
• Deep familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF architecture frameworks.
• Capability to write code in Python or PowerShell to automate network provisioning and logging configurations.

Certifications (Highly Preferred)

• Certified Information Systems Security Professional (CISSP) or Information Systems Security Architecture Professional (CISSP-ISSAP).
• Cisco Certified Internetwork Expert (CCIE) or Cisco Certified Design Professional (CCDP).
• Certified Information Security Manager (CISM) or SABSA Chartered Security Architect.

Sensiple, Inc. is an Equal Opportunity Employer, and all qualified applicants will receive consideration for employment without regard to gender, race, colour, religion, sex, national origin, veteran or disability status.