Network Security Architect (Fulltime)

Network Security Architect – Cisco Secure Workload (CSW)

Fulltime Position

Key Responsibilities

Data Center Security & Zero Trust Architecture

• Design, implement, and troubleshoot Zero Trust Data Center Security solutions.
• Develop and enforce microsegmentation policies using Cisco Secure Workload and related security technologies.
• Apply Next-Generation Firewalls (NGFW), Network Access Control (NAC), and Layer 3–7 security controls.
• Demonstrate a strong understanding of Cisco ACI architecture and its Zero Trust capabilities.
• Apply data center networking principles and protocols to support secure, scalable, and reliable environments.

Cisco Secure Workload & Application Dependency Mapping

• Use Cisco Secure Workload (CSW) to identify application dependencies, workload communication patterns, and traffic flows.
• Translate application dependency findings into security policies and microsegmentation strategies.
• Support policy design, implementation, validation, and enforcement.
• Assess application dependencies and potential service impacts before security policy changes.

Cutover Planning & Execution

• Perform readiness assessments before scheduled cutovers and security policy enforcement windows.
• Validate configurations, application dependencies, implementation steps, and rollback plans before go-live.
• Lead or support live Zero Trust policy changes and network cutovers during weekend maintenance windows.
• Troubleshoot issues in real time and execute rollback procedures when necessary to protect service availability.
• Perform post-change validation to confirm security policies are enforced correctly and network functionality remains intact.
• Document readiness assessments, execution results, incidents, rollback activities, and post-event findings.

Technical Leadership & Stakeholder Communication

• Collaborate with network architects, security engineers, application teams, and other technical stakeholders.
• Communicate implementation status, technical risks, dependencies, and issues clearly to business stakeholders.
• Provide technical guidance during high-pressure change events while maintaining a calm, structured, and consultative approach.
• Follow established change management, configuration management, deployment, and resolution procedures.
• Maintain accurate and timely records of project activities and work hours.

Required Qualifications

• Strong experience in Data Center Security Architecture and Zero Trust implementations.
• Hands-on experience designing, operating, and troubleshooting microsegmentation and Layer 3–7 security controls.
• In-depth knowledge of data center networking architecture, protocols, and principles.
• Strong understanding of Cisco ACI architecture, configuration, deployment, and Zero Trust capabilities.
• Experience with Next-Generation Firewalls, Network Access Control, and enterprise network security technologies.
• Experience planning and executing network cutovers, security policy enforcement, readiness checks, rollback procedures, and post-change validation.
• Ability to perform application dependency analysis and translate findings into security policies.
• Valid CCNP, CCIE, or equivalent certification; candidates must specify the certification and whether it is active.
• Excellent written and verbal English communication skills.
• Strong problem-solving, troubleshooting, documentation, and customer-facing consulting skills.
• Ability to work independently while collaborating effectively with a small technical team.
• Willingness to work the required weekend schedule and participate in after-hours maintenance windows.

Preferred Qualifications

• Three or more years of hands-on experience with Cisco Secure Workload (CSW).
• Experience using CSW for workload visibility, application dependency mapping, microsegmentation, and policy enforcement.
• Experience with network automation, scripting, orchestration, or network automation tools.
• Experience supporting enterprise-scale data center security transformations.
• Knowledge of emerging Zero Trust and network security technologies.
• Experience working in large financial services or regulated enterprise environments.

Work Schedule & Availability

The selected candidate must be willing to work one of the following schedules:

• Wednesday–Sunday, 8:00 AM–5:00 PM Eastern Time; or
• Thursday–Monday, 8:00 AM–5:00 PM Eastern Time.

Weekend cutovers and after-hours maintenance windows are part of the role. Candidates must be comfortable supporting scheduled implementation events and responding to technical issues during these windows.