Job Summary
Job Description: Lead Network Security Solution Architect Position Title Lead Network Security Solution Architect Experience 12-15 Years Location India (Hybrid/Remote) Role Summary We are seeking a highly skilled Lead Network Security Solution Architect to design, architect, and drive enterprise-wide network security transformation initiatives across global environments. The ideal candidate will possess deep expertise in Network Security, Firewall Technologies, Enterprise Networking, Data Center Operations, SD-LAN/SD-WAN transformations, and Security Governance. The role requires leadership in designing scalable, secure, and highly available network infrastructures while collaborating with global stakeholders, security teams, cloud architects, and operations teams. Key Responsibilities Enterprise Security Architecture Design and implement secure network architectures for enterprise, ISP, data center, and hybrid cloud environments. Develop security standards, blueprints, and reference architectures. Lead security assessments, architecture reviews, and technology evaluations. Define and implement Zero Trust, segmentation, and security modernization strategies. Network Security Solutions Design Architect and deploy: Palo Alto Firewalls Fortinet Security Solutions Cisco ASA Firewalls Juniper Security Solutions IPS/IDS Platforms VPN Technologies (IPSec, SSL, Remote Access) Proxy and Secure Web Gateway Solutions Network Access Security Controls Drive firewall standardization and security optimization across large-scale enterprise environments. Network Transformation & Modernization Lead SD-LAN and network transformation programs. Manage end-to-end migration activities including: Discovery and assessment High-level and low-level design Implementation planning Cutover execution Post-migration support Develop scalable and future-ready network architectures. Global Security Operations Leadership Oversee security infrastructure operations across multiple global locations. Ensure high availability, resiliency, and compliance of network security platforms. Lead incident response, troubleshooting, root cause analysis, and change management activities. Collaborate with SOC and infrastructure teams to strengthen security posture. Firewall Governance & Centralized Management Manage large-scale Palo Alto environments through Panorama. Lead: Policy governance Security rule optimization Template and stack administration Configuration management Compliance reporting Log analysis and threat investigations Drive security automation and operational excellence initiatives. Routing & Switching Architecture Design and support enterprise routing and switching solutions. Expertise in: BGP MPLS L2VPN/L3VPN OSPF IS-IS Static Routing Nexus Switching Platforms Ensure secure and optimized connectivity across enterprise and service provider environments. Security Compliance & Risk Management Conduct vulnerability and risk assessments. Support audit and compliance programs. Drive remediation activities using security assessment tools. Ensure adherence to organizational security policies and industry best practices. Required Qualifications Education Bachelor's Degree in Engineering, Computer Science, Information Technology, or related discipline. Experience 12+ years of experience in Enterprise Networking and Network Security. Experience leading global security transformation projects. Strong exposure to multi-vendor security environments. Experience managing large-scale enterprise security deployments. Technical Skills Security Platforms Palo Alto Networks Panorama Fortinet/FortiManager Cisco ASA Juniper Security Platforms IPS/IDS Solutions Proxy Solutions Networking Routing & Switching Nexus Platforms MPLS BGP OSPF IS-IS VPN Technologies SD-LAN / SD-WAN Tools AlgoSec Nexpose Security Monitoring Platforms Network Management & Monitoring Tools Infrastructure Enterprise Data Centers Global WAN Networks Hybrid Networking Environments High Availability Desi
Key Responsibilities
Enterprise Security Architecture
- Design and implement secure network architectures for enterprise, ISP, data center, and hybrid cloud environments.
- Develop security standards, blueprints, and reference architectures.
- Lead security assessments, architecture reviews, and technology evaluations.
- Define and implement Zero Trust, segmentation, and security modernization strategies.
Network Security Solutions Design
- Architect and deploy:
- Palo Alto Firewalls
- Fortinet Security Solutions
- Cisco ASA Firewalls
- Juniper Security Solutions
- IPS/IDS Platforms
- VPN Technologies (IPSec, SSL, Remote Access)
- Proxy and Secure Web Gateway Solutions
- Network Access Security Controls
- Drive firewall standardization and security optimization across large-scale enterprise environments.
Network Transformation & Modernization
- Lead SD-LAN and network transformation programs.
- Manage end-to-end migration activities including:
- Discovery and assessment
- High-level and low-level design
- Implementation planning
- Cutover execution
- Post-migration support
- Develop scalable and future-ready network architectures.
Global Security Operations Leadership
- Oversee security infrastructure operations across multiple global locations.
- Ensure high availability, resiliency, and compliance of network security platforms.
- Lead incident response, troubleshooting, root cause analysis, and change management activities.
- Collaborate with SOC and infrastructure teams to strengthen security posture.
Firewall Governance & Centralized Management
- Manage large-scale Palo Alto environments through Panorama.
- Lead:
- Policy governance
- Security rule optimization
- Template and stack administration
- Configuration management
- Compliance reporting
- Log analysis and threat investigations
- Drive security automation and operational excellence initiatives.
Routing & Switching Architecture
- Design and support enterprise routing and switching solutions.
- Expertise in:
- BGP
- MPLS
- L2VPN/L3VPN
- OSPF
- IS-IS
- Static Routing
- Nexus Switching Platforms
- Ensure secure and optimized connectivity across enterprise and service provider environments.
Security Compliance & Risk Management
- Conduct vulnerability and risk assessments.
- Support audit and compliance programs.
- Drive remediation activities using security assessment tools.
- Ensure adherence to organizational security policies and industry best practices.
Skill Requirements
Education
- Bachelor's Degree in Engineering, Computer Science, Information Technology, or related discipline.
Experience
- 12+ years of experience in Enterprise Networking and Network Security.
- Experience leading global security transformation projects.
- Strong exposure to multi-vendor security environments.
- Experience managing large-scale enterprise security deployments.
Technical Skills
Security Platforms
- Palo Alto Networks
- Panorama
- Fortinet/FortiManager
- Cisco ASA
- Juniper Security Platforms
- IPS/IDS Solutions
- Proxy Solutions
Networking
- Routing & Switching
- Nexus Platforms
- MPLS
- BGP
- OSPF
- IS-IS
- VPN Technologies
- SD-LAN / SD-WAN
Tools
- AlgoSec
- Nexpose
- Security Monitoring Platforms
- Network Management & Monitoring Tools
Infrastructure
- Enterprise Data Centers
- Global WAN Networks
- Hybrid Networking Environments
- High Availability Design
Other Requirements
- CCNP Enterprise
- Cisco Certified Specialist Security Core
- Palo Alto PCNSE
- Fortinet NSE Certifications
- CCIE Enterprise Infrastructure (Preferred)
- CCIE Security (Preferred)
- CISSP (Preferred)
Leadership Competencies
- Solution Architecture
- Stakeholder Management
- Technical Leadership
- Security Governance
- Program Delivery
- Vendor Coordination
- Risk Management
- Global Team Collaboration
- Customer Engagement
Success Metrics
- Successful delivery of network security transformation programs.
- Improved security posture and reduced operational risk.
- High availability of global security infrastructure.
- Standardized and optimized firewall governance.
- Successful migration and modernization of enterprise network environments.
- Enhanced compliance and security audit performance.