Strategic Network Security Architect (Zero Trust & Cloud)

Tata Consultancy Services Limited; Cincinnati (OH); On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

401K Plan

Job summary

Tata Consultancy Services Limited in Cincinnati, OH seeks a Senior Engineer to own and govern the network-security architecture across secure-network workstreams and global site deployments. The role leads discovery, assessment, and target-state design for Site Vault, firewall platforms, and Zero Trust initiatives.

You will define HLDs/LLDs, review changes for security and resilience, and provide architecture oversight across Check Point, Palo Alto, Cisco, and cloud edge services.

Qualifications

• Proven experience defining enterprise network-security architectures across data centers, colocation facilities, points of presence, cloud, branch, third-party, internet edge, and industrial or manufacturing environments.
• Architecture experience across Check Point and Palo Alto firewalls, LAN switching, load balancing, WAF, secure remote access, Zero Trust/Zscaler, cloud ingress/egress, and OT network segmentation.
• Ability to lead discovery, current-state assessment, architecture-gap analysis, target-state design, design reviews, deployment governance, validation, stabilization, and handover to operations.
• Experience developing and approving HLDs, LLDs, network and security diagrams, traffic and data-flow diagrams, bills of materials, implementation roadmaps, migration strategies, architecture standards, and decision records.
• Experience defining policy governance, firewall-rule assurance, access-control standards, configuration baselines, RBAC, least privilege, segregation of duties, and compliance boundaries.

Responsibilities

• Own and govern the network-security architecture across assigned secure-network workstreams and global site deployments.
• Lead discovery and assessment of existing physical and logical networks, security platforms, connectivity, traffic flows, remote-access paths, cloud interfaces, operational dependencies, and architecture gaps.
• Define target-state architectures and reusable patterns for Site Vault, firewall platforms, third-party connectivity, Zero Trust, internet ingress/egress, WAF, cloud edge, and Secure Connected Shops.
• Create, review, approve, and maintain HLDs, LLDs, Visio diagrams, traffic-flow diagrams, bills of materials, migration approaches, implementation timelines, standards, and configuration requirements.
• Provide architecture oversight for Check Point, Palo Alto, Cisco, load balancers, Cloudflare WAF, Zscaler, CyberArk, AWS/Azure edge services, Nozomi, SIEM, CMDB, and ITSM integrations as applicable.
• Ensure designs align with approved customer architectures, cybersecurity policies, deployment processes, compliance boundaries, and operational-support requirements.
• Lead or participate in architecture and design reviews, documenting decisions, risks, assumptions, exceptions, dependencies, technical debt, and required remediation actions.
• Review proposed production changes and evaluate security, availability, resilience, performance, dependency, testing, rollback, and maintenance-window risks before implementation.
• Validate implementation against approved designs through configuration review, testing support, evidence checks, cutover assurance, post-implementation review, and as-built documentation.
• Provide cross-tower technical leadership for complex incidents, vulnerabilities, problems, migrations, platform lifecycle activities, and major changes requiring architecture analysis.
• Define reference architectures, guardrails, templates, playbooks, and standardized deployment patterns to support consistent execution across sites and delivery pods.
• Guide operational readiness, monitoring requirements, support-model alignment, knowledge transfer, SOP development, stabilization, and handover to L1/L2/L3 operations.
• Collaborate with network, firewall, cloud, endpoint, identity, application, SOC, OT, site, compliance, service-management, procurement, and vendor stakeholders.
• Identify opportunities for architecture simplification, automation, policy optimization, reliability improvement, and lifecycle modernization while preserving compliance and service continuity.

Skills

Network Security

Education

Bachelor of Computer Science

Job description

Tata Consultancy Services Limited in Cincinnati, OH seeks a Senior Engineer to own and govern the network-security architecture across secure-network workstreams and global site deployments. The role leads discovery, assessment, and target-state design for Site Vault, firewall platforms, and Zero Trust initiatives.

You will define HLDs/LLDs, review changes for security and resilience, and provide architecture oversight across Check Point, Palo Alto, Cisco, and cloud edge services.