Network Security Architect

Role Overview

• Design enterprise-scale network security architectures using Cisco firewall technologies.
• Architect secure network environments including segmentation, DMZ design, VPN architecture, and secure connectivity models.
• Develop security frameworks aligned with Zero Trust principles and defence-in-depth strategies.
• Lead the deployment and configuration of Cisco Secure Firewall (FTD), ASA, and Firepower Management Center (FMC) environments.
• Design and implement high availability, clustering, and load balancing configurations.
• Perform large-scale firewall migrations and upgrades from legacy platforms to modern Cisco security solutions.
• Implement advanced security features including: o Intrusion Prevention Systems (IPS) o Advanced Malware Protection (AMP) o SSL/TLS inspection o Application control o URL filtering o Site-to-site and remote access VPNs.
• Design and deliver large enterprise or multi-site firewall deployments.
• Lead migration strategies from legacy firewalls to Cisco Secure Firewall platforms.
• Develop scalable firewall policies across hundreds of rulesets, sites, and security zones.
• Ensure solutions meet high performance, redundancy, and compliance requirements.
• Act as the technical authority on Cisco security architecture.
• Provide technical mentorship to network engineers and security teams.
• Develop deployment standards, documentation, and architectural blueprints.
• Participate in design reviews, security audits, and infrastructure planning sessions.
• Ensure architectures align with industry security frameworks and best practices.
• Conduct security assessments and architecture reviews to identify risks and improvement opportunities.
• Produce detailed architecture diagrams, solution designs, and implementation guides.
• Present technical solutions to customers and stakeholders.
• Support pre-sales engagements with technical expertise and architecture input where required.

Requirements

• 7+ years experience in network security engineering or architecture.
• Extensive experience designing and deploying Cisco firewall solutions.
• Deep knowledge of: o Cisco Secure Firewall (FTD / Firepower) o Cisco ASA o Firepower Management Center (FMC)
• Experience with large-scale enterprise firewall deployments.
• Strong expertise in: o Network segmentation o High availability and clustering o VPN technologies (IPsec / SSL VPN) o Routing protocols (BGP, OSPF, EIGRP) o NAT and advanced firewall policies
• Experience working in multi-site enterprise or service provider environments.

Desirable

• Experience integrating Cisco firewalls with: o Cisco Identity Services Engine (ISE) o Cisco SecureX o Cisco Umbrella o Cisco Duo
• Experience designing security for cloud environments (Azure, AWS, GCP).
• Familiarity with automation and infrastructure-as-code for network deployments.
• Experience with SD-WAN environments.

Certifications (Preferred)

• The following certifications are highly desirable:
• CCNP Security
• CCIE Security
• Cisco Secure Firewall Specialist
• Cisco Certified Network Professional (Enterprise or Security)

Additional certifications that would be beneficial:

• CISSP
• GIAC security certifications

Personal Attributes

• Strong architectural thinking and problem-solving abilities
• Excellent communication and documentation skills
• Ability to translate complex technical concepts into clear architectural guidance
• Strong attention to detail and commitment to security best practices
• Ability to work collaboratively across technical and business teams
• Passion for continuous learning and staying ahead of evolving security threats.

Tech Stack

• AWS
• Azure
• Cloud
• Firewalls
• Google Cloud Platform