Network Security Architect

Harnham; United States; On-site; USD 171,000 - 209,000; Full time

Benefits offered by this job

Equity grant

On-site role in North Dallas

Job summary

Harnham is seeking aSenior Network Security Architect to design, implement, and advance network security across a large-scale enterprise. You will work hands-on to secure enterprise networks, manufacturing environments, data centers, and hybrid clouds, focusing on Palo Alto technologies and Zero Trust.

You will lead complex deployments, shape long-term security strategy, and mentor teams while ensuring secure connectivity for global users and workloads across AWS/Azure.

Qualifications

• 8+ years of experience in enterprise network engineering or security environments.
• 4+ years hands-on Palo Alto Networks experience with NGFWs and Panorama.
• Proven experience with SCM and Prisma Access for enterprise secure access.
• Strong enterprise network security architecture experience across large environments.
• Experience with Zero Trust, segmentation, and secure access design.

Responsibilities

• Design, implement, and maintain secure network architectures for global environments.
• Lead deployment and lifecycle management of Palo Alto NGFW, Panorama, SCM, Prisma Access.
• Manage firewall infrastructure including Palo Alto and Fortinet technologies.
• Develop Zero Trust architectures and network segmentation strategies.
• Design secure connectivity for AWS, Azure, and hybrid environments.
• Implement DLP capabilities and security controls for sensitive data.
• Improve deployment efficiency through automation using Python, Ansible, Terraform, APIs.
• Provide senior engineering support during major incidents and outages.
• Contribute to long-term security roadmaps and architectural standards.

Skills

Zero Trust principles

Enterprise network security

Security architecture leadership

Tools

Palo Alto NGFW

Panorama

Strata Cloud Manager

Prisma Access

Fortinet

AWS

Azure

Python

Ansible

Terraform

REST APIs

Git

Infoblox DNS/DHCP/IPAM

F5 load balancers

A10 load balancers

Job description

Work Authorization: U.S. Citizens or Green Card Holders Only

Location & Schedule

This position is based in North Dallas, Texas, and requires working onsite five days per week. Remote and hybrid arrangements are not available.

Compensation

• Base Salary: Up to $190,000 annually
• Company Performance Bonus: 20%
• Individual Performance Bonus: 20%
• Equity: Up to $100,000 in equity, vesting over 4 years

About the Company

We are partnering with a global technology and manufacturing organization that develops advanced electronic technologies used across a wide range of industries.

With a significant international footprint spanning corporate offices, manufacturing facilities, data centers, and cloud environments, the organization operates a complex technology infrastructure that supports business-critical operations worldwide.

The company is continuing to strengthen its enterprise network security architecture, with a focus on protecting critical infrastructure, securing manufacturing environments, modernizing global connectivity, and safeguarding valuable intellectual property.

About the Role

We are seeking a Senior Network Security Architect to help design, implement, and advance network security infrastructure across a large-scale global enterprise environment.

This is a highly technical, hands-on architecture role focused on securing enterprise networks, manufacturing environments, data centers, hybrid cloud infrastructure, and remote connectivity.

The ideal candidate brings deep expertise in Palo Alto Networks technologies, particularly Next-Generation Firewalls (NGFW), Panorama, Strata Cloud Manager (SCM), and Prisma Access, along with a strong background in enterprise network security architecture.

You will play a key role in developing and implementing security architectures, leading complex infrastructure deployments, advancing Zero Trust initiatives, and helping shape the organization's long-term network security strategy.

This opportunity is well suited for an experienced network security engineer or architect who enjoys both designing enterprise-scale solutions and remaining directly involved in their implementation.

What You'll Do

• Network Security Architecture: Design, implement, and maintain secure, resilient network architectures across global enterprise, manufacturing, data center, and hybrid cloud environments.
• Palo Alto Security Infrastructure: Lead the deployment, configuration, and lifecycle management of Palo Alto NGFW, Panorama, Strata Cloud Manager, Prisma Access, and associated threat prevention technologies.
• Firewall & Perimeter Security: Manage and optimize enterprise firewall infrastructure, including Palo Alto and Fortinet technologies, to strengthen network protection and security policy enforcement.
• Zero Trust & Segmentation: Develop and implement Zero Trust architectures, network segmentation, and micro‑segmentation strategies to protect critical infrastructure and isolate manufacturing environments from corporate networks.
• Cloud & Remote Access Security: Design secure connectivity solutions supporting globally distributed users, applications, and workloads across AWS, Azure, and hybrid environments.
• Data Protection: Implement Data Loss Prevention (DLP) capabilities and security controls to protect sensitive business information and intellectual property.
• Security Automation: Improve deployment efficiency and configuration consistency through automation using Python, Ansible, Terraform and APIs.
• Advanced Troubleshooting: Provide senior‑level engineering support for complex network security issues and collaborate with security operations teams during major incidents.
• Technical Strategy & Leadership: Contribute to long‑term security roadmaps, establish architecture standards, document technical designs, and provide technical guidance to global engineering teams.

What We're Looking For

• 8+ years of experience in enterprise network engineering, network security, or information security environments.
• 4+ years of dedicated hands‑on Palo Alto Networks experience, including deploying, configuring, managing, and troubleshooting Next-Generation Firewalls (NGFW) and Panorama.
• Proven experience with Palo Alto Strata Cloud Manager (SCM) and Prisma Access, particularly supporting enterprise-scale secure access and SASE deployments.
• Strong enterprise network security architecture experience, including designing and implementing security solutions across complex, large-scale network environments.
• Experience with Zero Trust security principles, network segmentation, micro‑segmentation, and secure access architecture.
• Hands‑on experience implementing enterprise security infrastructure, with the ability to translate architectural designs into operational solutions.
• Understanding of hybrid network security, including securing connectivity between on‑premises infrastructure, cloud environments, and distributed users.
• Experience supporting complex network security environments, including advanced troubleshooting, infrastructure deployments, and security policy management.

Nice to Have

• Experience with Fortinet firewalls and multi-vendor network security environments.
• Background securing manufacturing, industrial, or Operational Technology (OT) environments.
• Experience implementing enterprise Data Loss Prevention (DLP) solutions.
• Knowledge of SASE/SSE architectures, Zero Trust Network Access (ZTNA), NAC/802.1X, and secure remote access technologies.
• Experience with AWS and Microsoft Azure network security controls.
• Hands‑on automation experience using Python, Ansible, Terraform, REST APIs, and Git.
• Experience with Infoblox DNS/DHCP/IPAM and F5 or A10 load balancers.
• Familiarity with Palo Alto threat prevention technologies, including WildFire, URL Filtering, DNS Security, and GlobalProtect.
• Experience integrating network security infrastructure with SIEM platforms such as Splunk.
• Relevant certifications, including PCNSE, PCCSE, CCNP Security, CCIE Security, CISSP, CISM, or cloud security certifications.
• Experience contributing to enterprise security roadmaps, developing architecture standards, or mentoring other engineers.

Why This Role?

Enterprise-Scale Architecture: Work on network security infrastructure supporting a complex global organization, including enterprise networks, manufacturing operations, data centers, and hybrid cloud environments.

Hands-On Technical Ownership: Take an active role in both architectural design and implementation, rather than focusing exclusively on high‑level strategy or operational support.

Modern Security Technologies: Work extensively with Palo Alto's enterprise security ecosystem, including NGFW, Panorama, Strata Cloud Manager, and Prisma Access, while contributing to Zero Trust and SASE initiatives.

Business-Critical Infrastructure: Help protect manufacturing environments, proprietary technology, and essential systems where network reliability and security directly impact business operations.

Technical Influence: Contribute to long‑term security architecture decisions, engineering standards, and infrastructure modernization initiatives while collaborating with global technology and security teams.