Principal Architect - Perimeter Security & Zero Trust

EOS IT Solutions; New York (NY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

EOS IT Solutions is seeking a Principal Architect with deep expertise in perimeter/DMZ architectures and secure ingress/egress for on-premises and cloud environments. This leadership role will drive target-state design, standards, and roadmaps, enabling end-to-end self-service capabilities.

The ideal candidate has 10+ years in network/security architecture, strong cloud networking knowledge, and experience with WAF/NGFW, API gateways, and IaC.

Qualifications

• 10+ years in network/security architecture.
• Expertise in cloud networking and perimeter technologies (AWS/Azure/GCP).
• Strong knowledge of WAF, NGFW, API gateways, service mesh, and identity.
• Proficiency with Infrastructure-as-Code and policy-as-code.
• Excellent communication and stakeholder leadership.

Responsibilities

• Define and evolve target-state perimeter/DMZ architectures.
• Develop segmentation and secure ingress/egress patterns for hybrid/multi-cloud.
• Lead the architectural roadmap aligning Cloud and Middleware capabilities.
• Establish reference architectures and automation-first patterns.
• Drive Zero Trust-aligned designs, security guardrails, and compliance.
• Partner with Cloud, Network, Security, and Middleware teams to deliver self-service.
• Guide architectural governance, design reviews, and PoC implementations.

Skills

Network security architecture

Cloud networking

Perimeter security

WAF and NGFW

API gateways

IaC / policy-as-code

Stakeholder leadership

Communication

Education

Certifications: CCSP/CISSP/cloud architect

Job description

EOS IT Solutions is seeking a Principal Architect with deep expertise in perimeter/DMZ architectures and secure ingress/egress for on-premises and cloud environments. This leadership role will drive target-state design, standards, and roadmaps, enabling end-to-end self-service capabilities.

The ideal candidate has 10+ years in network/security architecture, strong cloud networking knowledge, and experience with WAF/NGFW, API gateways, and IaC.