ZR_2784_JOB

Zohorecruit; Whippany, Newark, New York (NJ, NJ, NY); In loco; USD 120.000 - 150.000; Tempo pieno

Descrizione del lavoro

Zohorecruit is seeking a senior network security architect to lead engineering teams in a fast-paced environment, focusing on secure remote access, ZTNA, and SASE. The role requires driving capability roadmaps and high-level system design for automation initiatives.

You will collaborate with stakeholders to implement modern security architectures across cloud and on-prem networks, applying agile practices and governance to ensure secure, reliable access and policy enforcement.

Competenze

• Expertise in discovery and documentation of business requirements for security automation.
• Experience with Event Storming and User Story Mapping for capability roadmaps.
• Strong background in network security technologies and architectures.

Mansioni

• Lead network engineering/security teams in Agile environments.
• Ensure secure, efficient delivery of network security services and platforms.
• Drive transformation initiatives from conception to enterprise adoption.

Conoscenze

Requirements discovery

User story mapping

Event Storming

Capability roadmaps

High-level system design

ZTNA

Secure remote access

SASE

VPN

NAC

Zero Trust

Cybersecurity Mesh

SWG

CASB

Cloud security

AWS

Azure

GCP

FWaaS

Networking protocols

DNS

BGP

SD-WAN

Agile leadership

Scrum/Kanban

SRE metrics

Strumenti

Splunk

Terraform

Ansible

Azure AD

Okta

Ping

Descrizione del lavoro

Whippany, Newark or NYC, United States | Posted on 12/08/2025

• Expertise in the discovery and documentation of business requirements covering the desired outcome including capability roadmaps and high-level system design required for network security automation development, using Event Storming and User Story Mapping workshops.
  
• Deep expertise in network security technologies, particularly around Zero Trust Network Access (ZTNA), secure remote access, and modern secure access architectures like SASE. This includes strong practical knowledge of VPN technologies, network segmentation, and modern network defence paradigms (e.g., NAC, Zero Trust, SASE, Cybersecurity Mesh, advanced threat detection). Should be well versed in Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), cloud network security (AWS, Azure, GCP), and Firewall-as-a-Service (FWaaS), with a solid foundation in networking protocols like TCP/IP, DNS, BGP, and SD-WAN. Additionally, should have a clear understanding of DNS security, TLS, and core routing and switching concepts, all supporting secure and resilient access models.
  
• Strong experience in leading network engineering or network security teams operating under Agile ways of working driving continuous improvement, and ensuring efficient, secure delivery of network security services and platforms in a fast-paced environment. Proficiency in Agile Methodologies - Scrum/Kanban, backlog and workflow management and SRE specific reporting (MTTR, deployment frequency, SLO etc.)
  

Nice to Have:

• Strong experience integrating secure access with identity and cloud platforms, leveraging tools like Azure AD, Okta, and Ping using SAML, OAuth2, and OpenID Connect. Should be familiar with security logging, telemetry, and SIEM integration, including tools like Splunk. Experience with automation via REST APIs and infrastructure-as-code tools (e.g., Terraform, Ansible). Adds value, particularly in streamlining policy enforcement and compliance. Experience with recognized security frameworks (NIST 800-207, ISO 27001, CIS Controls), demonstrating the ability to support governance, risk management, and audit readiness across heterogeneous environments.
  
• Experience in driving complex, transformational network security initiatives from conception through to enterprise-wide adoption, including securing stakeholder buy-in and investment.
  
• Outstanding communication, negotiation, and influencing skills to navigate a complex stakeholder landscape (including business leaders, technology peers, risk, compliance, and audit functions) and foster a culture of security-by-design.