Staff Cybersecurity Architect

Job description

Staff Cybersecurity Architect Position Summary

We are seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments. This role requires deep expertise in network security, cloud and perimeter technologies, segmentation, and practical architecture patterns that enterprise teams can implement and operate.

Key Responsibilities

Architecture Assessment and Strategy: Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities. Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities. Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.

Network Governance & Design

Establish network security standards, reference architectures, and approved design patterns. Design secure on-premises, cloud, and hybrid network architectures. Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns. Review network designs to ensure alignment with security standards and target-state architecture.

Implementation Oversight

Guide implementation of approved network security architectures across projects. Validate that security controls are implemented and operating effectively. Support migration from current-state to target-state architectures. Provide technical leadership to engineers, project teams, and architects.

Collaboration & Communication

Serve as a liaison between security leadership, architecture, infrastructure, cloud, networking, and business teams. Present assessments, recommendations, and roadmaps to leadership. Promote security-by-design and drive recommendations through adoption.

Qualifications

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience. 5+ years of cybersecurity experience, including significant network security architecture experience. Strong knowledge of security frameworks, architecture methodologies, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and secure remote access. Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.

Excellent communication, leadership, stakeholder management, and execution skills.

Preferred certifications

CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet.

Technical Experience

Preferred: Cisco Secure Client / Cisco Secure Access Fortinet platforms and perimeter firewalls AWS networking and security controls Network segmentation, Zero Trust, and OT/ICS architecture OT environments and AI experience #LI-PROMOTEDJOBS