The Intersect Group logo

Sr. Network Security Architect

The Intersect Group
  • Cumming, GA
  • Instant Apply
1 day ago

Job Description

Senior Network Security Architect (SNSA)
Location: Hybrid/Onsite (as required)

Company Overview
We’re partnering with a large, enterprise organization recognized for its commitment to secure, reliable services and a modern, cloud-forward technology strategy. The company operates at scale across complex environments and values collaboration, continuous improvement, and operational excellence. Joining this team means shaping an enterprise perimeter security program that protects critical platforms customers depend on every day—without naming the organization directly, per confidentiality.
Role Summary
As the Senior Network Perimeter Security Architect, you will lead the design, implementation, and ongoing governance of the enterprise’s perimeter security architecture across on-prem, virtual, and cloud environments. You’ll be the technical authority for next-gen firewalls, secure access, segmentation/zero trust, and cloud-native controls, ensuring scalability, resilience, and compliance.
Working closely with security engineering, IT infrastructure, cloud operations, SOC, and application security, you’ll evaluate and deploy technologies, guide standards and patterns, and reduce risk while improving operational efficiency.
Key Responsibilities
  • Architect & maintain perimeter security controls: next-generation firewalls, secure web gateways, VPNs/proxies, DDoS mitigation, IPS/IDS, and SSL decryption.
  • Lead architecture reviews and risk assessments for new network and cloud deployments; establish secure patterns for on-prem, hybrid, and multi-cloud.
  • Drive zero trust and segmentation strategies, including micro-segmentation (e.g., VMware NSX) and secure network design principles.
  • Evaluate, pilot (POCs), and deploy new security tools and capabilities; define standards, policies, and hardening baselines for perimeter defense.
  • Collaborate cross-functionally with network engineering, cloud ops, SOC, and AppSec; advise on secure application and infrastructure configurations.
  • Respond to and analyze incidents involving perimeter technologies; proactively remediate risks and performance bottlenecks.
  • Support compliance initiatives (e.g., PCI DSS, HIPAA, ISO 27001, NIST) and produce/maintain documentation, diagrams, and runbooks.
  • Mentor junior engineers and provide technical leadership across projects; define KPIs/OKRs and metrics to demonstrate control effectiveness.
Key Requirements
  • Experience: 7–10 years in IT and security operations with 5–7 years in an architecture or lead role focused on cyber/perimeter network security.
  • Firewalls & Threat Prevention: Deep expertise with enterprise-class platforms (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Meraki, Check Point, Juniper); experience managing large fleets (200+ firewalls).
  • Network Core: Strong knowledge of routing/switching, BGP, SD-WAN security, IPSec/SSL VPNs, VLANs, DNS, DHCP, RADIUS, Wi-Fi; packet capture/analysis (e.g., NetFlow, IP SLA).
  • Secure Access & Detection:NAC (e.g., Cisco ISE, 5+ years or equivalent), IPS/IDS, SSL decryption, and secure remote access solutions.
  • Cloud Security: Hands-on with AWS/Azure/GCP controls (e.g., security groups, WAFs, transit gateways), ZTNA (e.g., Zscaler), and hybrid architectures.
  • Segmentation & Virtualization: Experience with VMware NSX (NSX-T/NSX-v) for micro-segmentation and distributed firewalling.
  • Automation & Tooling: Familiarity with Ansible, Terraform, Kubernetes, Puppet; scripting in Python/Bash/JavaScript; enterprise monitoring (e.g., SolarWinds Orion).
  • Frameworks & IAM: Knowledge of NIST (incl. 800-144), CIS, CSA-CCM, ISO 27001/27017/27040; IAM and federation protocols (SAML, OAuth, OpenID, SCIM).
  • Preferred Certifications:CISSP, CCSP, CCNP Security, PCNSE (or similar).
  • Education: Bachelor’s in Cybersecurity, Information Technology, Computer Science, Information Systems (or equivalent experience).
  • Work Style: Ability to lead high-impact initiatives, work cross-functionally, document clearly, and support off-hours work for projects/incidents as needed.
Nice to Have
  • Experience implementing and managing WAFs and endpoint protection (e.g., via SCCM).
  • Familiarity with major SaaS ecosystems (e.g., Salesforce, Workday, Microsoft 365, SAP).
  • Experience developing QoS/Multicast strategies and using packet analysis tools.
Why This Role
You’ll define and evolve an enterprise perimeter security posture that protects mission-critical services, partnering with senior leaders to reduce risk and enable the business. If you enjoy solving complex problems at scale and leading from both the whiteboard and the keyboard, this is a chance to make a measurable impact.
 

Numbers & Facts

LocationCumming, GA
IndustryStaffing/Employment Agencies
Company Size500 to 999 employees
Year Founded2006

About Company

The Intersect Group is a different and better business partner. We create unparalleled value for our clients by combining industry-leading Consulting capabilities with comprehensive Staffing and recruitment services. Clients trust us to deliver results based on our deep expertise and proven resources within finance, accounting, and information technology. Through our flexible delivery approach, you get the right solution, at the right time to accelerate your success and achieve all of your mission-critical objectives.

Skills

  • Amazon Web Services (AWS)unmatched
  • Analysis Skillsunmatched
  • Ansibleunmatched
  • Applications Securityunmatched
  • Automationunmatched
  • BGPunmatched
  • Bash Scriptingunmatched
  • Business Strategyunmatched
  • CCNP - Cisco Certified Network Professionalunmatched
  • CCSP - Cisco Certified Security Professionalunmatched
  • CISSP - Certified Information Systems Security Professionalunmatched
  • Cisco ASA (Adaptive Security Appliance)unmatched
  • Cisco Network Systemsunmatched
  • Cloud Computingunmatched
  • Computer Scienceunmatched
  • Computer Securityunmatched
  • Continuous Improvementunmatched
  • Cross-Functionalunmatched
  • Cryptographyunmatched
  • DHCP (Dynamic Host Configuration Protocol)unmatched
  • DNS (Domain Name System)unmatched
  • Denial of Service (DoS)unmatched
  • Documentationunmatched
  • Ecosystemsunmatched
  • Endpoint Securityunmatched
  • Enterprise Protectionunmatched
  • Firewallsunmatched
  • Fleet Managementunmatched
  • GCP (Good Clinical Practices)unmatched
  • HIPAA (Health Insurance Portability and Accountability Act)unmatched
  • IP (Internet Protocol)unmatched
  • IPsec (IP Security)unmatched
  • ISO (International Organization for Standardization)unmatched
  • Information Technology & Information Systemsunmatched
  • Internet Securityunmatched
  • Intrusion Detection Systemsunmatched
  • Intrusion Prevention Systemsunmatched
  • JavaScriptunmatched
  • Juniper Networks Product Familyunmatched
  • Keyboardsunmatched
  • Leadershipunmatched
  • Machine Toolunmatched
  • Mentoringunmatched
  • Metricsunmatched
  • Microsoft Product Familyunmatched
  • Microsoft Windows Azureunmatched
  • Multicastunmatched
  • Netflowunmatched
  • Network Architecture/Engineeringunmatched
  • Network Designunmatched
  • Network Performance/Analysisunmatched
  • Network Routingunmatched
  • Network Securityunmatched
  • Network Switchingunmatched
  • OAuthunmatched
  • OpenIDunmatched
  • Operational Improvementunmatched
  • Operational Strategyunmatched
  • PCI-DSSunmatched
  • Performance Metricsunmatched
  • Policy Developmentunmatched
  • Problem Solving Skillsunmatched
  • Puppet (Configuration Management)unmatched
  • Python Programming/Scripting Languageunmatched
  • QoS (Quality of Service)unmatched
  • RADIUS (Remote Authentication Dial-In User Service)unmatched
  • Remote Accessunmatched
  • Risk Analysisunmatched
  • Risk Managementunmatched
  • SAPunmatched
  • SSL-TLS (Secure Socket Layer - Transport Layer Security)unmatched
  • Salesforce.comunmatched
  • Scripting (Scripting Languages)unmatched
  • Security Architectureunmatched
  • Security Assertion Markup Language (SAML)unmatched
  • Service Level Agreement (SLA)unmatched
  • Software Engineeringunmatched
  • Software as a Service (SaaS)unmatched
  • Standards Developmentunmatched
  • Support Documentationunmatched
  • System Center Configuration Manager (SCCM)unmatched
  • Team Playerunmatched
  • Technical Leadershipunmatched
  • Technical Strategyunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • VLAN (Virtual Local Area Network)unmatched
  • VMWareunmatched
  • VPN (Virtual Private Network)unmatched
  • Virtualizationunmatched
  • Wi-Fiunmatched
  • Wide Area Network (WAN)unmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder