Network Security Architect

Donnelley Financial, LLC; Rockville (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Donnelley Financial Solutions is seeking a Network Security Architect to assess and design secure network architectures across on-premises, cloud, and hybrid environments. You will lead technical initiatives, mentor engineers, and align solutions with the company’s Zero Trust strategy.

The role involves implementing comprehensive LAN/WAN/cloud architectures, configuring firewalls, managing Azure integrations, and guiding teams to meet security standards.

Qualifications

• 10+ years in network architecture/design.
• Experience with firewalls, WAF, load balancers, DDoS protection.
• Experience with cloud platforms (Azure, AWS, Google Cloud) and network security in hybrid environments.
• Knowledge of Zero Trust, SASE, SSE, micro-segmentation.
• Strong IT risk and cybersecurity knowledge; ability to explain security to non-technical audiences.

Responsibilities

• Design and implement architectures for LAN/WAN/cloud with high availability and security.
• Translate business requirements into network solutions and roadmaps.
• Provide technical leadership and ensure adherence to standards and policies.
• Develop roadmaps for on-premises and cloud infrastructure; contribute to Network Security roadmap.
• Manage firewall configurations and troubleshooting; ensure data security.
• Design Azure integrations and test performance/resilience in cloud setups.
• Analyze data flows and optimize network paths for performance.
• Create and maintain detailed network diagrams and documentation.
• Collaborate with IT, product teams, and vendors for seamless integration.
• Provide Level-3 on-call support and mentor engineers.

Skills

Network architecture

Network security

Firewalls & WAF

Cloud networking (Azure, AWS, GCP)

Zero Trust/SASE

Scripting/automation

Leadership/mentoring

Communication to leadership

CI/CD concepts

On-call / incident response

Education

Bachelor's in CS/IT or related field

Tools

Azure

AWS

Google Cloud

SD-WAN

SASE

CASB

Firewall management tools

NAC

Job description

Overview

Join a dynamic team at the pulse of global markets, delivering software and service solutions for essential financial reporting and capital markets transactions. We are a values-driven organization that empowers you to build a fulfilling career while bringing your authentic self to work every day. Our Win as One mentality links team success to client, shareholder, and employee satisfaction.

Recognized as one of AMERICA'S MOST LOVED WORKPLACES for five consecutive years and a Built In Best Places to Work for six years, we offer competitive compensation, a flexible workplace, comprehensive benefits, and opportunities for professional growth. Bring your passion and talents to DFIN — because being YOU thrives here.

Summary

The Network Security Architect will perform network and network security assessments and technical evaluations for existing applications and new technology initiatives. Based on industry best practices, this role provides guidance and hands-on experience to teams in design, development, and maintenance of various networking and network security solutions.

This role includes continuous improvement of network security architecture policies, standards, and procedures for solutions residing in public/private/hybrid infrastructure or SaaS-based environments. The individual will provide technical leadership and consulting to teams across DFIN implementing, modifying, and maintaining technology solutions, mentor junior and senior engineers, and align emerging solutions with DFIN\'s Zero Trust Strategy.

Responsibilities

• Design and implementation: Develop and implement comprehensive architectures for LAN, WAN, and cloud environments with high availability, scalability, and security. Provide domain expertise in both public and private cloud and enterprise technology.
• Technical to business translation: Analyze business requirements to develop technical network solutions and the framework; drive continuous improvement for network and network security architectures, assess requirements, and recommend optimizations.
• Technical leadership: Direct teams to adhere to standards, policies, procedures, and configuration guidelines for network and network security solutions; develop functional, nonfunctional, and business requirements; review architecture for security standards and policies.
• Vision: Develop technology roadmaps for on-premises and cloud infrastructure; contribute to the vision and roadmap for the Network Security team.
• Firewall management: Configure, manage, and troubleshoot firewalls to protect network integrity and data security.
• Azure integration: Design and manage network solutions within Azure (virtual networks, VPNs, load balancing, network security solutions, and hybrid cloud setups); test and monitor to ensure performance and resilience.
• Data flow and network path analysis: Identify and optimize data flows and network paths to improve performance and efficiency.
• Documentation: Create and maintain detailed network diagrams, configurations, and documentation for reference and troubleshooting.
• Collaboration: Work with IT, product teams, and vendors to ensure seamless integration and operation of network systems in cloud and data centers.
• Troubleshooting: Provide advanced troubleshooting and support for network-related issues to minimize downtime.
• Mentoring: Mentor junior and senior engineers on network design, best practices, and troubleshooting.
• On-call: Provide Level-3 escalation for Level-1/2 on-call duties.

Qualifications

Technical Skills:

• Minimum of 10 years of hands-on experience in network architecture and design.
• Expertise with network security products such as firewalls, WAF, load balancers, and DDoS protection.
• Experience with networking products including routers, switches, SD-WAN, SASE, wireless, and NAC.
• Experience with cloud platforms (IaaS, PaaS, SaaS); key technologies include Azure, Office 365, AWS, Google Cloud, container services, and CASB solutions.
• Knowledge of Zero Trust, zone-based architecture, defense in depth, SASE, SSE, and micro-segmentation.
• Strong IT risk and cybersecurity knowledge; familiarity with cloud components, routing protocols, security protocols and tools.
• Familiarity with identity solutions, CI/CD tools, configuration and automation techniques, scripting languages, containers and orchestration solutions.
• Excellent written and verbal communication skills with experience presenting to leadership, and the ability to explain security and risk concepts to technical and non-technical audiences.

Soft Skills:

• Provide recommendations to optimize spending and maximize value of solution investments.
• Lead the identification, development, and collection of key strategic and operational metrics for the CISO organization.
• Research current industry technology to facilitate vendor and partner communications.

Business Partnership:

• Establish and maintain strong partnerships with technical, business, customers, associates, sourcing stakeholders, and vendors as necessary.
• Participate in industry/vendor forums to guide product development activities.

Education/Certifications:

• Bachelor\'s degree in computer science, information technology, or a related field.
• Relevant certifications such as CISSP, CCIE, CCDP, AWS/Azure certs are highly desired.

EEO and Accommodations

It is the policy of Donnelley Financial Solutions to select, place, and manage all its employees without discrimination based on race, color, national origin, gender, age, religion, disability, veteran status, sexual orientation, genetic information or any other protected status. If you require accommodations due to disability, you may contact [e-mail] for a reasonable accommodation request.

At DFIN, protecting your identity is a top priority. Be aware of scammers impersonating DFIN recruiters. You will only receive legitimate communications from [e-mail]. If you have doubts, contact us for verification using the same email address.