Senior Network Security Architect — Cloud, Zero Trust, Hands-On

Ryder System, Inc.; Indianapolis (IN); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Health and welfare benefits

Paid time off

401(k) retirement plan

Equal Opportunity Employer

Job summary

Ryder System, Inc. is seeking a Network Security Architect to design and build robust security architecture across on‑prem and cloud environments. You will work closely with engineering to implement designs and ensure seamless integration from concept to deployment.

The role reports to the Director of Security Architecture and Engineering within the CISO Office, and requires hands‑on experience with firewall platforms, cloud networking, and regulatory frameworks. Travel is minimal.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Seven (7) years or more experience in an Information Security Architect role.
• Seven (7) years or more experience with regulatory compliance and information security frameworks (NIST 800/CSF, ISO 27001, COBIT, etc.).
• Advanced knowledge of network protocols, design concepts, and access control.
• Advanced knowledge of encryption, data protection, and privileged access design.
• Proficiency with Windows and Linux systems.
• Experience with regex and JSON.
• One or more security certifications (CISSP, GIAC, etc.).
• Experience with APIs.
• Experience with CloudFormation, Terraform, Azure RM, or GCP templates.
• Experience with CSPs (Azure, AWS, GCP) installation/configuration of security features.
• DevSecOps architecting experience.
• Security skills including access control, runtime defense/anti-malware, vulnerability management.
• Experience with security products and working with internal business customers.
• One or more Palo Alto Network certifications (PCNSA, PCNSE, PCCSE, PCSAE).

Responsibilities

• Designs network security architecture from the ground up: firewall policy and configuration, network segmentation, Zero Trust access design, and cloud network architecture in Microsoft Azure.
• Leads technical migrations end to end: assesses the current environment, designs the target state, builds the configuration, and manages the cutover.
• Works directly alongside engineering through the build and implementation phase of every project they design, adjusting the design in real time when engineering encounters something the design did not account for.
• Reviews existing network security architecture, identifies gaps, and designs the remediation, including hands on work to resolve technical debt in legacy configurations.
• Assesses, scopes, and estimates the work and hours required to deliver security architecture components of larger projects and programs.
• Serves as the technical expert and trusted advisor to engineering, IT, and business partners on network security design questions.
• Documents and diagrams architecture in both conceptual and physical form, including the underlying configuration, not just high level diagrams.
• Works assigned Request Security Architecture (RSA) tickets and related efforts in ServiceNow.
• Stays current on emerging network security technologies and threats and incorporates them into architecture as needed.

Skills

Advanced network security knowledge

DevSecOps experience

Strong communication skills

Hands-on firewall configuration

Cloud security architecture

Regulatory frameworks knowledge

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Terraform

CloudFormation

Azure Resource Manager

AWS security services

GCP Cloud Deployment Manager

Job description

Ryder System, Inc. is seeking a Network Security Architect to design and build robust security architecture across on‑prem and cloud environments. You will work closely with engineering to implement designs and ensure seamless integration from concept to deployment.

The role reports to the Director of Security Architecture and Engineering within the CISO Office, and requires hands‑on experience with firewall platforms, cloud networking, and regulatory frameworks. Travel is minimal.