Senior Hybrid DMZ & Zero-Trust Architect

GDH; Charlotte (NC); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

GDH seeks a senior Enterprise Network Security Architect to design and implement enterprise perimeter, external connectivity, and DMZ architectures across internet, cloud, and hybrid environments. You will establish architectural strategies, target-state designs, and roadmaps aligned with Zero Trust and security requirements.

You will lead cross-functional discussions with infrastructure, security, development, and business teams, mentor engineers, and ensure scalable, observable, and compliant

Qualifications

• 15+ years of progressive experience in network engineering and security architecture.
• 10+ years designing enterprise-scale network and security architectures within complex environments.
• Experience developing architectural strategies, target-state designs, reference architectures, and technology roadmaps.
• Experience with cloud networking and security across Azure, AWS, and Google Cloud environments.
• Strong knowledge of Zero Trust principles, perimeter security, external connectivity, DMZ architecture, segmentation, and network automation.
• Certifications such as CISSP, CCIE, AWS Certified Security – Specialty preferred.

Responsibilities

• Develop and maintain architectural strategies and technology roadmaps for enterprise perimeter services, external connectivity, and DMZ environments.
• Define target-state designs, reference architectures, and reusable design patterns for securely exposing applications and APIs.
• Evaluate emerging technologies, cloud-native security architectures, and network automation capabilities to support modernization and security improvements.
• Lead architecture and solution discussions across cross-functional teams to support scalability, flexibility, resilience, and operational readiness.
• Design secure and observable solutions for internet-facing workloads and partner, third-party, cloud, and hybrid connectivity.
• Provide architectural guidance for Zero Trust capabilities, including identity-aware access, segmentation, and microsegmentation.
• Provide technical leadership to infrastructure, security, and development teams regarding network and security architecture standards.
• Document architectural decisions, technical tradeoffs, dependencies, and risks and communicate complex concepts to stakeholders.
• Mentor architects and engineers and promote consistent architecture and engineering best practices.
• Support adherence to applicable security, regulatory, operational, and governance requirements.

Skills

Enterprise network security

Architecture leadership

Cross-functional collaboration

Zero Trust

Education

CISSP

CCIE

AWS Certified Security – Specialty

Tools

Azure

AWS

Google Cloud

Job description

GDH seeks a senior Enterprise Network Security Architect to design and implement enterprise perimeter, external connectivity, and DMZ architectures across internet, cloud, and hybrid environments. You will establish architectural strategies, target-state designs, and roadmaps aligned with Zero Trust and security requirements.

You will lead cross-functional discussions with infrastructure, security, development, and business teams, mentor engineers, and ensure scalable, observable, and compliant