Network Security Architect - Zero Trust & Cloud Strategy

Falcon Smart IT (FalconSmartIT); New York (NY); Sur place; USD 140 000 - 210 000; Plein temps

Résumé du poste

Falcon Smart IT in New York City seeks a Security Architect to design and implement secure network architectures for LANs, WANs, SD-WAN and multi-cloud environments. You will set baselines for NGFW, IDS/IPS and NAC, perform risk assessments, and guide technology acquisitions with a security-first approach.

The role requires hands-on expertise in IP routing, MPLS, BGP, RBAC, MFA/SSO/PKI, and cloud perimeter security across AWS, Azure, and GCP. Strong knowledge of SABSA/TOGAF is preferred.

Qualifications

• Local to NYC security architecture and strategy design.
• Design and deliver secure network frameworks using ZTA and secure zoning principles.
• Develop solutions across LANs, WANs, SD-WAN, MPLS, data centers and multi-cloud environments.
• Establish baseline configurations for NGFW, IDS/IPS and NAC.
• Conduct risk assessments against NIST, SANS and CIS.
• Evaluate acquisitions to understand security impact.
• Plan vulnerability scans, pen testing and ethical hacking exercises.
• Define MFA, SSO, PKI, and identity federation implementations.
• Enforce RBAC to limit network access by role and need-to-know.
• Architect data‑in‑transit encryption (IPsec/SSL VPNs) and DLP parameters.
• Proficient in IP routing, MPLS, BGP, SD-WAN, wireless and data center security.
• Hands-on with AWS, Azure and GCP security perimeters.
• Familiar with SABSA, TOGAF, COBIT, ITIL and DoDAF frameworks.
• Automation capability with Python or PowerShell to provision networks and logging.

Responsabilités

• Design and deliver comprehensive, secure network frameworks using trust domain segregation, Zero Trust Architecture (ZTA) and secure zoning principles.
• Develop technical solutions and integration strategies across LANs, WANs, SD-WAN, MPLS, data centers and multi‑cloud environments.
• Establish baseline configurations for network infrastructure, including NGFWs, IDS/IPS and NAC.
• Perform risk assessments and vulnerability management per NIST, SANS and CIS.
• Evaluate proposed acquisitions and software interfaces for security impact.
• Plan and oversee regular vulnerability scanning, penetration testing and ethical hacking exercises.
• Define and implement identity federation, MFA, SSO and PKI systems.
• Enforce RBAC to limit network access by role.
• Architect data‑in‑transit encryption paths and DLP parameters.
• Map secure network perimeters inside AWS, Azure and GCP.
• Track SABSA/TOGAF/COBIT/ITIL/DoDAF architecture frameworks.
• Automate provisioning and logging with Python or PowerShell.

Connaissances

Network Security

MPLS

Azure

Zero Trust Architecture

IP Routing

BGP

SD-WAN

Data Center Architecture

IDS/IPS

RBAC

MFA/SSO/PKI

Python

PowerShell

Cloud: AWS/Azure/GCP

SABSA/TOGAF/COBIT/ITIL/DoDAF

DLP

Outils

Check Point

Palo Alto

Cisco NGFW

SIEM

EDR

IPsec/SSL VPN

Description du poste

Falcon Smart IT in New York City seeks a Security Architect to design and implement secure network architectures for LANs, WANs, SD-WAN and multi-cloud environments. You will set baselines for NGFW, IDS/IPS and NAC, perform risk assessments, and guide technology acquisitions with a security-first approach.

The role requires hands-on expertise in IP routing, MPLS, BGP, RBAC, MFA/SSO/PKI, and cloud perimeter security across AWS, Azure, and GCP. Strong knowledge of SABSA/TOGAF is preferred.