Must Haves:
– Experience at an architect level
– 5+ years experience in network security architecture or engineering – with a focus on cloud environments
– AWS Public Cloud experience
– Strong understanding of network security controls: firewalls (Palo Alto experience highly desired), Security Groups, VPN, and layered defense models
– Expertise in network security and designing and implementing, infrastructure and architecture background
– Information security background-familiar with technology risk domains
– Proven ability to translate application connectivity needs into firewall rule sets and network security designs
– Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
Plusses:
– AWS certifications (e.g., AWS Security Specialty, Solutions Architect)
– Experience with enterprise firewall policy management and automation tools.
– Background in financial services or highly regulated environments.
About the Role:
We are seeking an experienced Network Security Architect to support a critical migration initiative moving key applications and workloads to the AWS public cloud. This role will work closely with application teams, the security architecture group, and the perimeter defense team to define and implement network security requirements that ensure secure and compliant cloud adoption.
Key Responsibilities:
• Collaborate with application and infrastructure teams to gather and analyze network security requirements including connectivity, allowed ports, protocols, and data flows.
• Translate application requirements into detailed and actionable network security policies and firewall rules.
• Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.
• Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.
• Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.
• Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.
• Support troubleshooting and optimization of existing cloud network security configurations.