{"id":558690,"url":"https://alion.io/job/first-american-network-security-architect-hybrid","title":"Network Security Architect (Hybrid)","company":{"id":8115,"name":"First American","domain":"firstam.com","url":"https://alion.io/company/first-american","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":29,"ghost_share":0,"stale_share":0.931,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Santa Ana, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":129300,"max":172300,"currency":"USD","period":"year","gross":null,"usd_annual":172300},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"PKI","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-30T05:05:40Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Who We Are\nJoin a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for eleven consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all. For more information, please visit www.careers.firstam.com.What We Do\nThe Network Security Architect is responsible for defining, designing, and governing enterprise network security architectures that support business objectives, technology modernization initiatives, and risk management requirements. This role collaborates closely with internal IT teams, client managers, business stakeholders, third-party partners, vendors, and auditors to ensure effective security outcomes. Working alongside Security Engineers, the Security Architect develops secure architectural solutions and provides guidance for successful implementation and operational adoption by Security Engineers and Analysts.What You’ll Do:\nDefine and maintain the enterprise network security architecture roadmap, ensuring alignment with business objectives, risk management requirements, and technology strategies.\nServe as the technical authority for network security architecture decisions and provide design governance across enterprise technology initiatives.\nLead the architecture, design, and deployment of network security solutions supporting enterprise infrastructure and business applications.\nLead the design and governance of enterprise firewall architectures, network segmentation strategies, secure remote access solutions, and Zero Trust initiatives.\nArchitect, design, and review secure network and connectivity solutions across on-premises, cloud, hybrid, and third-party environments.\nEstablish architectural standards and reference designs for network security technologies, including firewalls, VPNs, network access controls, and cloud-delivered security services.\nConduct and oversee technical risk assessments and security exposure analyses across systems, networks, and applications.\nLead security design reviews for new applications, infrastructure, and technology initiatives.\nServe as a trusted advisor to IT and business teams by assessing and communicating security risks associated with technology changes.\nRecommend and promote information security policies, standards, best practices, and regulatory compliance requirements.\nLead initiatives to audit security controls, address policy violations, and ensure compliance with established security standards and procedures.\nResearch, evaluate, and recommend emerging security technologies and industry best practices to strengthen the organization's security posture and support strategic technology decisions.\nDrive continuous improvement of security processes, operational procedures, and departmental practices to enhance efficiency and effectiveness.\nProvide technical leadership and mentorship within the Information Security function, acting as a security subject matter expert.\nSupport critical business needs by providing after-hours coverage when required.\nJob Complexities & Impact\nMaintains a comprehensive understanding of information technology, cybersecurity, and business operations to align security architecture and strategic initiatives with organizational objectives.\nApplies advanced professional expertise and deep industry knowledge to address complex security, operational, and business challenges.\nProvides architectural guidance for the resolution of complex network security challenges and mentors engineers on security design and implementation best practices.\n\nExercises sound judgment when making decisions, recognizing that actions and errors at this level can have significant operational, financial, regulatory, and reputational impact.\nWhat You'll Bring:\nMinimum 5 years of experience designing, implementing, and governing enterprise network security architectures in large-scale, complex environments.\nDemonstrated experience leading the architecture and design of network security solutions, including enterprise firewalls, secure remote access, network segmentation, Zero Trust, and cloud connectivity.\nMust have experience integrating network security architectures with enterprise identity, directory, and infrastructure services.\nMust have experience evaluating security products, conducting proof-of-concept assessments, and managing vendor and strategic partner relationships.\nMust have a strong hands-on knowledge of network and security technologies, including firewalls, routers, network segmentation, access control lists (ACLs), intrusion detection/prevention systems (IDS/IPS), virtual private networks (VPNs), multifactor authentication (MFA), and public key infrastructure (PKI).\nMust have a deep understanding of networking concepts, including WAN, LAN, cloud connectivity, Internet protocols, network services, and hybrid infrastructure environments.\nMust have working knowledge of information security frameworks, standards, and regulatory requirements, including ISO 27001/27002, NIST, CIS Controls, COBIT, and related governance frameworks.\nMust have excellent communication and consulting skills, with the ability to translate technical security concepts into business-focused recommendations for stakeholders at all organizational levels.\nHas proven ability to develop and communicate security policies, standards, procedures, and architectural guidelines.\nDemonstrated ability to balance business objectives, operational requirements, and security priorities to enable secure business outcomes.\nMust have experience designing modern network security architectures, including Zero Trust, SASE/SSE, ZTNA, CASB, SD-WAN, network segmentation, and micro segmentation strategies.\n\nMust have proven experience designing and governing enterprise network security architectures in large-scale, complex environments.\nMust have extensive experience with Palo Alto Networks technologies, including Next-Generation Firewalls, Panorama, GlobalProtect, and Prisma Access.\nMust have experience securing cloud network architectures and hybrid connectivity models across Azure, AWS, and/or Google Cloud environments.\nBachelor's degree in Computer Science, Information Systems, Information Security, Engineering, or a related field, or equivalent combination of education and experience.\nAdvanced security training, professional certifications, and continuing education in cybersecurity, networking, and cloud technologies are preferred.\nPreferred Certifications\nCISSP (Certified Information Systems Security Professional)\nCISM (Certified Information Security Manager)\nCCSP (Certified Cloud Security Professional)\nPCNSE (Palo Alto Networks Certified Network Security Engineer)\nCCSK (Certificate of Cloud Security Knowledge)\nCCNP Security\nAWS Certified Security - Specialty\nPay Range: $129,300.00 - $172,300.00 AnnuallyThis hiring range is a reasonable estimate of the base pay range for this position at the time of posting. Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.** Note that the following statements only apply to candidates who will be working from an unincorporated area within Los Angeles County. **\nFirst American will consider for employment all qualified applicants, including those with arrest or conviction records, in a manner consistent with the requirements of applicable state and local laws (e.g., the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act).\nFirst American intends to conduct a review of an applicant’s criminal history in connection with a conditional offer. First American reasonably believes that a criminal history may have a direct, adverse and negative relationship with the following material job duties for this position potentially resulting in the withdrawal of the conditional offer of employment: handling of confidential, proprietary or trade secret information belonging to First American or its customers, administrating or facilitating financial transactions, and the ability to meet customer-imposed criminal history requirements.\nWhat We Offer\nBy choice, we don’t simply accept individuality - we embrace it, we support it, and we thrive on it! Our People First culture is inclusive for all employees - not just because it's the right thing to do, but because it's the key to our success. We are proud to foster an authentic and inclusive workplace For All. You are free and encouraged to bring your entire, unique self to work. First American is an equal opportunity employer in every sense of the term.Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.","description_format":"text","description_chars":9339,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Property & Casualty Insurance","Real Estate Appraisal"],"lifecycle":[{"event":"open","at":"2026-09-09T01:09:57Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.541,"p_room":0.36,"age_days":52,"expected_fill_days":33,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":172300,"is_top_pay":false},"html_url":"https://alion.io/job/first-american-network-security-architect-hybrid","json_url":"https://alion.io/job/first-american-network-security-architect-hybrid.json","meta":{"generated_at":"2026-10-30T11:40:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16685,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8115},"rest":"https://alion.io/mcp/rest/get_company?id=8115"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirst-american-network-security-architect-hybrid"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirst-american-network-security-architect-hybrid"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirst-american-network-security-architect-hybrid"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/first-american-network-security-architect-hybrid\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirst-american-network-security-architect-hybrid"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":558690}},{"tool":"search_jobs","arguments":{"company":"firstam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":558690},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}