Job Description Seeking a Senior Network Perimeter Security Architect to lead the strategy, design, and modernization of enterprise network security across data centers, branch locations, hybrid cloud, and remote access environments. This role will define scalable, resilient security architectures and technical standards across next-generation firewalls, Zero Trust, segmentation, SASE/SSE, secure connectivity, and cloud perimeter controls. The architect will design and oversee Palo Alto and Fortinet firewall environments, Zscaler ZIA/ZPA and ZTNA solutions, Cisco SD-WAN integrations, secure remote access, and hybrid cloud networking across Azure, AWS, and GCP. Responsibilities include establishing security design patterns and governance, leading architecture and risk reviews, supporting firewall lifecycle and platform rationalization, and ensuring high availability, disaster recovery, and secure partner connectivity. The role will also help drive automation through Terraform, Ansible, Python, REST APIs, and Git while partnering closely with Cybersecurity, Network Engineering, Cloud Engineering, Applications, Operations, Architecture, and managed service providers. This individual will provide senior-level technical guidance during complex incidents, maintain architecture standards and documentation, mentor engineers, and ensure solutions transition effectively into operational support. Skills and Requirements
- 7-10+ years of relevant enterprise networking and cybersecurity experience
- 5+ years in network security architecture, lead engineering, or equivalent design accountability.
- Demonstrated experience architecting multi-site enterprise NGFW environments, preferably Palo Alto, including centralized policy governance, routing, VPN, HA, inspection, and logging.
- Strong understanding of TCP/IP, BGP, OSPF, NAT, DNS, DHCP, IPSec/SSL VPN, network segmentation, and SD-WAN security integration.
- Hands-on architectural experience with Zero Trust, ZTNA, cloud perimeter controls, and secure hybrid connectivity; ability to assess Zscaler ZIA/ZPA designs.
- Experience producing HLD/LLD, security architecture standards, risk assessments, implementation guidance, and resilient design validation.
- Ability to communicate complex technical tradeoffs to leadership and work across Cybersecurity governance and Infrastructure operations
- Experience with Fortinet, Cisco Secure Firewall, Check Point, and multi-vendor firewall migrations or rationalization.
- Deep familiarity with Azure network security, Private Link, ExpressRoute, Azure Firewall, and AWS/GCP equivalents.
- Experience with Cisco SD-WAN, Zscaler ZIA/ZPA, Cisco ISE/NAC, NSX/vDefend, web application firewalls, andapplication delivery/security integration.
- Automation experience with Terraform, Ansible, Python, REST APIs, Git, and CI/CD; familiarity with securitytelemetry and SIEM integrations.
- Experience with SolarWinds, Splunk, ThousandEyes, Wireshark, NetFlow, or similar diagnostics and observabilityplatforms.
- Knowledge of
NIST, CIS
Controls, ISO 27001, PCI DSS and other applicable frameworks; experience withvendor/managed service governance.
- Bachelor's degree in Cybersecurity, Computer Science, IT or equivalent experience; relevant certifications such as
CISSP, CCSP, CCNP
Security, PCNSE, or comparable credentials. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.