Senior Enterprise Network Security Architect (Hybrid NYC)

Tech Junction Ltd; New York, Northern (NY, KY); Hybrid; USD 150,000 - 210,000; Part time

Job summary

ITBMS Inc. in New York City, NY is seeking an experienced Network Security Architect to lead the design, deployment, and security of complex enterprise networks and data centers.

The role covers hybrid on-site work and cloud perimeter hardening across AWS, Azure, and GCP. The ideal candidate has 15+ years of enterprise security architecture experience, deep routing knowledge (IP, MPLS, BGP, SD-WAN), and hands-on firewall and SIEM/EDR expertise.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Cybersecurity, Electrical Engineering, or a related field.
• Minimum 15+ years of professional experience in enterprise network architecture, security engineering, and infrastructure design.
• Deep technical proficiency in IP routing protocols, MPLS, BGP, SD-WAN, wireless networks, and advanced data center architectures.
• Extensive hands-on deployment experience with Checkpoint, Palo Alto, or Cisco NGFW security hardware and software.
• Solid practical experience configuring SIEM monitoring platforms and Endpoint Detection and Response (EDR) solutions.
• Proven hands-on experience mapping secure network perimeters within cloud environments (AWS, Azure, GCP).
• Strong analytical problem-solving capabilities, crisis management skills, and clear executive communication.
• Professional availability for onsite/hybrid employment in New York City, NY (Locals highly preferred; Application email: [e-mail]).

Responsibilities

• Architect, design, deploy, and secure enterprise network infrastructures, advanced data center architectures, and hybrid topologies.
• Engineer robust IP routing, MPLS, BGP, SD-WAN, and enterprise wireless network architectures.
• Deploy, configure, and manage next-generation firewalls (NGFW) including Checkpoint, Palo Alto, and Cisco platforms.
• Implement and oversee enterprise SIEM monitoring platforms and Endpoint Detection and Response (EDR) security solutions.
• Design and map secure network perimeters, virtual private clouds (VPCs), and IAM policies inside AWS, Azure, and Google Cloud Platform (GCP).
• Conduct rigorous security audits, vulnerability assessments, and gap analyses across cloud and on-premise environments.
• Collaborate proactively with infrastructure engineering squads, DevOps teams, and executive cybersecurity stakeholders.
• Define and enforce network security governance standards, encryption protocols, and zero-trust access policies.
• Maintain comprehensive technical architecture blueprints, network diagrams, security runbooks, and incident response procedures.
• Provide expert technical escalation support for complex network security anomalies and traffic flow bottlenecks.

Skills

IP routing

MPLS

BGP

SD-WAN

NGFW

SIEM

EDR

Cloud security

Security governance

Executive communication

Education

Bachelor’s or Master’s degree in CS/IT/Cybersecurity

Tools

Checkpoint

Palo Alto

Cisco NGFW

SIEM platforms

EDR solutions

Job description

ITBMS Inc. in New York City, NY is seeking an experienced Network Security Architect to lead the design, deployment, and security of complex enterprise networks and data centers.

The role covers hybrid on-site work and cloud perimeter hardening across AWS, Azure, and GCP. The ideal candidate has 15+ years of enterprise security architecture experience, deep routing knowledge (IP, MPLS, BGP, SD-WAN), and hands-on firewall and SIEM/EDR expertise.