Network Security Architect - Freelance

Context

Assignment for a leading global insurance and asset management group. The mission focuses on network security architecture, specializing in firewall rule management and remediation. The work location is Paris 17, with a contract duration of 3 months renewable. The daily rate is €650. The assignment start date is ASAP, with a response deadline of 23/10/2026. Two free days at the start of the mission are included. English fluency and CV in English with full name are required.

Missions

• Support the remediation of firewall rules connecting Group entities to the Group Backbone and produce the evidence required to close the related audit issue.

• Ensure every in-scope rule has an owner, documented decision, remediation status, and supporting evidence by the end of the assignment.

• Remove, restrict, or cover P0/P1 rules with approved exceptions.

• Validate business need and security approval for retained P2/P3 rules.

• Collaborate closely with local CSOs, CIOs, application owners, security teams, and Group network teams.

• Assist entities in translating legitimate business requirements into precise, least-privilege firewall rules.

• Coordinate restriction or removal of unnecessary and high-risk access.

• Review and prioritize the existing firewall rule inventory.

• Support entities in defining legitimate access requirements: source populations and systems, target applications and destinations, required protocols and ports, duration, and accountable owner.

• Challenge overly broad or risky rules, including ANY services, large source or destination ranges, obsolete access, unused rules, and unjustified administrative or sensitive protocols.

• Prepare compliant firewall-opening, modification, and replacement requests with entities.

• Coordinate with network teams to restrict, disable, replace, or remove firewall rules, including change planning, testing, implementation evidence, and rollback arrangements.

• Prioritize P0/P1 remediation and ensure P2/P3 rules have documented business justification and security approval.

• Prepare time-bound exception requests when remediation cannot be completed, including residual risk, compensating controls, responsible owner, and committed remediation date.

• Maintain the remediation tracker, report progress, escalate blockers, and prepare the audit-closure evidence package.

Required Expertise

• Expertise in network architecture, segmentation, routing, traffic flows, TCP/IP, UDP, HTTP/S, DNS, SSH, RDP, SMB, identity, database, and administrative protocols.

• Proven experience in firewall rule lifecycle management, including rule creation, review, restriction, and decommissioning.

• Demonstrated expertise in network security architecture, privilege principles, risk assessment, and regulatory compliance.

• Demonstrated expertise in advising on and delivering security assurance programs, including audits, remediation planning and execution, change governance, testing and rollback strategies, and compliance evidence collection.

• Demonstrated expertise in translating business requirements into precise network access requirements and constructively challenging technical requests through risk-based analysis.

• Proven experience in stakeholder management, documentation, reporting, prioritization, and delivery governance within complex enterprise environments.

Language & Organizational Context

• Professional proficiency in English required.

• French language skills and experience with Group-specific tools and governance processes will be considered during the evaluation process.

1. Minimum 8 years of experience in network architecture and security
2. Expertise in network architecture, segmentation, routing, and protocols such as TCP/IP, UDP, HTTP/S, DNS, SSH, RDP, SMB, identity, database, and administrative protocols
3. Proven experience in firewall rule lifecycle management, including rule creation, review, restriction, and decommissioning
4. Demonstrated expertise in network security architecture, privilege principles, risk assessment, and regulatory compliance
5. Experience advising on and delivering security assurance programs, including audits, remediation planning and execution, change governance, testing and rollback strategies, and compliance evidence collection
6. Ability to translate business requirements into precise network access requirements and challenge technical requests through risk-based analysis
7. Proven experience in stakeholder management, documentation, reporting, prioritization, and delivery governance within complex enterprise environments
8. Professional proficiency in English required
9. French language skills and experience with Group-specific tools and governance processes are a plus