Network Security Architect

Posted 56ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Cisco Network Security Architect responsible for large-scale deployment of Cisco firewall solutions. Collaborate with customers and technical teams to ensure secure network architectures.

Responsibilities:

  • Design enterprise-scale network security architectures using Cisco firewall technologies.
  • Architect secure network environments including segmentation, DMZ design, VPN architecture, and secure connectivity models.
  • Develop security frameworks aligned with Zero Trust principles and defence-in-depth strategies.
  • Lead the deployment and configuration of Cisco Secure Firewall (FTD), ASA, and Firepower Management Center (FMC) environments.
  • Design and implement high availability, clustering, and load balancing configurations.
  • Perform large-scale firewall migrations and upgrades from legacy platforms to modern Cisco security solutions.
  • Implement advanced security features including:
  • o Intrusion Prevention Systems (IPS)
  • o Advanced Malware Protection (AMP)
  • o SSL/TLS inspection
  • o Application control
  • o URL filtering
  • o Site-to-site and remote access VPNs.
  • Design and deliver large enterprise or multi-site firewall deployments.
  • Lead migration strategies from legacy firewalls to Cisco Secure Firewall platforms.
  • Develop scalable firewall policies across hundreds of rulesets, sites, and security zones.
  • Ensure solutions meet high performance, redundancy, and compliance requirements.
  • Act as the technical authority on Cisco security architecture.
  • Provide technical mentorship to network engineers and security teams.
  • Develop deployment standards, documentation, and architectural blueprints.
  • Participate in design reviews, security audits, and infrastructure planning sessions.
  • Ensure architectures align with industry security frameworks and best practices.
  • Conduct security assessments and architecture reviews to identify risks and improvement opportunities.
  • Produce detailed architecture diagrams, solution designs, and implementation guides.
  • Present technical solutions to customers and stakeholders.
  • Support pre-sales engagements with technical expertise and architecture input where required.

Requirements:

  • 7+ years experience in network security engineering or architecture.
  • Extensive experience designing and deploying Cisco firewall solutions.
  • Deep knowledge of:
  • o Cisco Secure Firewall (FTD / Firepower)
  • o Cisco ASA
  • o Firepower Management Center (FMC)
  • Experience with large-scale enterprise firewall deployments.
  • Strong expertise in:
  • o Network segmentation
  • o High availability and clustering
  • o VPN technologies (IPsec / SSL VPN)
  • o Routing protocols (BGP, OSPF, EIGRP)
  • o NAT and advanced firewall policies
  • Experience working in multi-site enterprise or service provider environments.
  • Desirable
  • Experience integrating Cisco firewalls with:
  • o Cisco Identity Services Engine (ISE)
  • o Cisco SecureX
  • o Cisco Umbrella
  • o Cisco Duo
  • Experience designing security for cloud environments (Azure, AWS, GCP).
  • Familiarity with automation and infrastructure-as-code for network deployments.
  • Experience with SD-WAN environments.
  • Certifications (Preferred)
  • The following certifications are highly desirable:
  • CCNP Security
  • CCIE Security
  • Cisco Secure Firewall Specialist
  • Cisco Certified Network Professional (Enterprise or Security)
  • Additional certifications that would be beneficial:
  • CISSP
  • GIAC security certifications
  • Personal Attributes
  • Strong architectural thinking and problem-solving abilities
  • Excellent communication and documentation skills
  • Ability to translate complex technical concepts into clear architectural guidance
  • Strong attention to detail and commitment to security best practices
  • Ability to work collaboratively across technical and business teams
  • Passion for continuous learning and staying ahead of evolving security threats.