Network Security Architect: Zero Trust & Cloud Design

Ryder System, Inc.; Sacramento (CA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Disability Insurance

PTO Vacation

PTO Illness

PTO Bereavement

PTO Family Leave

401(k)

Job summary

Ryder System, Inc. is seeking a Network Security Architect to design and implement end-to-end network security, including firewall policy, segmentation, Zero Trust, and Azure cloud architecture.

You will work hands-on with engineering through build and cutover, ensuring architecture aligns with security requirements. The role reports to the Director of Security Architecture and Engineering and requires strong technical and communication skills, with experience across Windows/Linux, regulatory

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Seven (7) years or more Experience in an Information Security Architect role required.
• Seven (7) years or more Experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.) required.
• Network technologies including protocols, design concepts, and access control advanced required.
• Security technologies including encryption, data protection, access privileges advanced required.
• Knowledge of Microsoft Windows and Linux systems intermediate required.
• Knowledge of both regular expressions (regex) and JSON intermediate required.
• One or more Palo Alto Network certifications required such as – PCNSA, PCNSE, PCCSE, PCSAE.

Responsibilities

• Designs network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure.
• Leads technical migrations end to end: assesses the current environment, designs the target state, builds the configuration, and manages the cutover.
• Works directly alongside engineering through the build and implementation phase of every project they design, adjusting the design in real time when engineering encounters something the design did not account for.
• Reviews existing network security architecture, identifies gaps, and designs the remediation, including hands on work to resolve technical debt in legacy configurations.
• Assesses, scopes, and estimates the work and hours required to deliver security architecture components of larger projects and programs.
• Serves as the technical expert and trusted advisor to engineering, IT, and business partners on network security design questions.
• Documents and diagrams architecture in both conceptual and physical form, including the underlying configuration, not just high level diagrams.
• Works assigned Request Security Architecture (RSA) tickets and related efforts in ServiceNow.
• Stays current on emerging network security technologies and threats and incorporates them into architecture as needed.

Skills

Network security architecture

Firewall configuration

Cloud networking

DevSecOps

Communication skills

Zero Trust design

Education

Bachelor's degree in Computer Science or related field

Tools

ServiceNow

Terraform

CloudFormation

Azure Resource Manager

GCP Deployment Manager

Job description

Ryder System, Inc. is seeking a Network Security Architect to design and implement end-to-end network security, including firewall policy, segmentation, Zero Trust, and Azure cloud architecture.

You will work hands-on with engineering through build and cutover, ensuring architecture aligns with security requirements. The role reports to the Director of Security Architecture and Engineering and requires strong technical and communication skills, with experience across Windows/Linux, regulatory