Senior Network Security Architect

Altera; San Jose (CA); On-site; USD 160,000 - 230,000; Full time

Job summary

Altera is seeking a Senior Network Security Engineer to define and advance the enterprise network security strategy and architecture across on‑premises, cloud, data center, and campus environments. You will lead the adoption of Zero Trust, least‑privilege access, micro‑segmentation, and secure‑by‑design principles while mentoring engineers and guiding security governance.

You will partner with Network Engineering, Cloud, Infrastructure, DevOps, Product Security, Risk, and Legal to translate

Qualifications

• Senior technical authority for enterprise network security strategy and architecture.
• Ability to define target-state architecture and roadmaps across on-prem and cloud environments.
• Experience driving security standards, reference architectures, and governance.

Responsibilities

• Define and evolve enterprise network security strategy, target-state architecture, and technical roadmap.
• Serve as senior technical authority for complex network security decisions, design exceptions, and modernization initiatives.
• Drive adoption of Zero Trust, least-privilege access, micro-segmentation, and secure-by-design principles.
• Establish architecture standards, decision criteria, and measurable outcomes for security controls.
• Architect and review secure designs for data center, campus, laboratory, cloud, WAN, remote-access, and hybrid environments.
• Design segmentation and traffic-control models using security zones, VRFs, and next-generation firewalls.
• Evaluate and guide adoption of ZTNA, SWG, SASE, SD-WAN, NDR, IDS/IPS, firewall, and automation capabilities.
• Partner with teams to translate security requirements into implementable designs.
• Validate architecture through reviews, packet/flow analysis, resilience testing, and post-implementation verification.
• Conduct ongoing firewall administration and operations including policy lifecycle management and governance.
• Provide senior technical expertise during investigations involving network intrusion, lateral movement, and data exfiltration.
• Design and improve network telemetry, logging, detection coverage, and correlation across SIEM, NDR, firewalls, proxies, DNS, VPN, and cloud services.
• Perform packet capture, flow analysis, and root-cause analysis for complex security events.
• Act as escalation point during major incidents and translate findings into improvements.
• Perform security architecture and risk assessments for new systems and changes.
• Author and maintain network security standards, reference architectures, and guidelines.
• Align designs with frameworks like NIST CSF, SP 800-53, SP 800-207, and ISO/IEC 27001.
• Provide technical evidence and remediation guidance for audits and assessments.
• Facilitate architecture workshops and design reviews with cross-functional teams.
• Translate risks into business-aligned recommendations for engineering and executives.

Skills

Zero Trust

Least-Privilege

Micro-segmentation

Secure-by-Design

Security Architecture

Executive Communication

Architecture Ownership

Tools

Next-Gen Firewalls

ZTNA

SASE

SD-WAN

NDR

IDS/IPS

SIEM

Job description

Altera is seeking a Senior Network Security Engineer to define and advance the enterprise network security strategy and architecture across on‑premises, cloud, data center, and campus environments. You will lead the adoption of Zero Trust, least‑privilege access, micro‑segmentation, and secure‑by‑design principles while mentoring engineers and guiding security governance.

You will partner with Network Engineering, Cloud, Infrastructure, DevOps, Product Security, Risk, and Legal to translate