Senior Network Security Architect

Stellent IT LLC

San Jose (CA)

On-site

USD 180,000 - 240,000

Full time

12 days ago

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Stellent IT LLC is seeking an experienced Senior Network Security Architect to design, deploy, and optimize enterprise security infrastructure with emphasis on Palo Alto NGFW, Panorama, SCM, and Zscaler ZIA/ZPA. The role demands hands-on expertise in secure enterprise networks, cloud environments, remote access, and Zero Trust architectures.

The candidate will lead security operations, policy management, and incident response while collaborating with SOC, Cloud, and Infrastructure teams to

Qualifications

12+ years in Network Security/Security Engineering.
10+ years hands-on Palo Alto firewall experience.
10+ years managing Panorama environments.
4+ years supporting Zscaler ZIA and ZPA.
Experience with enterprise-scale security operations.

Responsibilities

Design, deploy, and support Palo Alto NGFWs across enterprise environments.
Manage and optimize security policies, NAT, VPNs, routing, App-ID/User-ID, SSL Decryption, URL Filtering.
Lead firewall upgrades, migrations, and HA deployments; conduct rule reviews and security audits.
Manage Panorama and SCM for centralized policy governance and visibility.
Administer ZIA/ZPA deployments and support Zero Trust initiatives.
Collaborate with SOC, Cloud, Infra, and App teams; integrate with SIEM and ticketing tools.

Skills

Leadership in security projects

Zero Trust

Advanced troubleshooting

Stakeholder management

Education

PCNSE

CISSP/CISM/CCSP

ZCA/ZCCA

Tools

Palo Alto NGFW Administration

Panorama Management

Strata Cloud Manager (SCM)

ZIA/ZPA

ZCC

Terraform

Ansible

Python

Job description

Senior Network Security Architect -

Location Onsite in San Jose, CA

GC and H4 EAD

JD:
Client is seeking an experienced Senior Network Security Architect to design, implement, manage, and optimize enterprise network security infrastructure with a strong focus on Palo Alto Networks NGFW, Panorama, Strata Cloud Manager (SCM), and Zscaler (ZIA/ZPA) technologies. The ideal candidate will serve as a senior technical resource responsible for securing enterprise networks, cloud environments, remote access, and Zero Trust architectures while ensuring operational excellence and compliance with security standards.

The role requires hands-on expertise in enterprise security operations, firewall policy management, threat prevention, cloud security, secure remote access, and troubleshooting complex network security issues. Experience with Palo Alto centralized management platforms including Panorama and Strata Cloud Manager, along with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA), is essential.

Key Responsibilities

Palo Alto Security Administration

Design, deploy, and support Palo Alto Next-Generation Firewalls (NGFW) across enterprise environments.
Manage and troubleshoot:
- Security policies
- NAT
- VPNs
- Routing
- App-ID / User-ID
- SSL Decryption
- URL Filtering
- DNS Security
- WildFire
- Threat Prevention

Perform firewall upgrades, migrations, hardware refreshes, and HA deployments.
Conduct rule reviews, policy optimization, and security audits.
Lead troubleshooting and root cause analysis for security incidents.

Panorama & Strata Cloud Manager (SCM)

Manage large-scale firewall environments using Panorama and SCM.
Develop centralized policy management and governance standards.
Manage device onboarding, logging, policy consistency, and visibility.
Utilize SCM policy analyzer and posture management features.
Support security compliance and posture improvement initiatives.

Zscaler Administration

Design, deploy, and administer Zscaler ZIA and ZPA solutions.
Configure and manage:
- Application Segments
- App Connectors
- Service Edges
- Access Policies
- Browser Access
- Security Policies
- SSL Inspection
- Cloud Firewall
- Data Protection Controls