Network Architect

Network Architect (AWS Security)
6 Month Contract
Melbourne - Hybrid
Day Rate: $1,100 - $1,200 

About the opportunity:

A large, regulated financial services organisation is investing heavily in a major cyber security uplift program and is looking for a senior Network Architect to help shape the network security architecture underpinning it. This is a hands on architecture role covering secure enterprise connectivity, AWS network security and patching governance across network and security infrastructure, working closely with cyber, cloud, infrastructure and endpoint teams.

What you'll be doing:

• Defining current state and target state network security architecture across corporate, cloud, third party and remote access environments
• Designing secure AWS networking patterns including VPCs, Transit Gateway, Direct Connect/VPN, private endpoints, egress control, segmentation and inspection patterns
• Supporting patching uplift across routers, switches, firewalls, proxies, VPN and load balancers
• Partnering with endpoint and security teams to integrate EDR, device compliance, secure access, telemetry and privileged administration paths
• Reviewing third party connectivity and managed service provider access for secure integration, monitoring, ownership and resilience
• Producing architecture diagrams, security patterns, decision records, risk assessments and implementation guardrails
• Supporting architecture governance and cyber risk forums with clear technical recommendations

What we need to see:

• 10+ years in network architecture, network security engineering or infrastructure security roles
• Strong enterprise networking background including routing, switching, DNS, firewall policy, proxy, VPN, WAF, load balancing and segmentation
• Solid AWS networking and security experience (VPC, Transit Gateway, Direct Connect, VPN, Route 53, Security Groups, NACLs, AWS Network Firewall, WAF, VPC endpoints, CloudWatch, VPC Flow Logs)
• Experience delivering cyber uplift or infrastructure security programs in complex enterprise environments
• Understanding of Zero Trust, least privilege, defence in depth and secure administration principles
• Experience with DLP tooling and policy enforcement across endpoint, network and cloud environments
• Exposure to regulated environment controls such as ISO 27001, NIST CSF or CIS Controls

Bonus points:

• Working knowledge of Azure security patterns
• Experience with NAC/ZTNA/SASE and remote access controls
• AWS Advanced Networking or AWS Security Specialty certification
• CISSP, CCSP, SABSA, TOGAF, CCNP or CCIE Security