Network Security Architect
First seen by Alion on Aug 21, 2026.
Job Description :
We are seeking a Network Security Architect with a world-class foundation in Core Networking (Layer 2/3) and Secure Site-to-Site Connectivity who would be working on customer products/projects.
Key Responsibilities :
- Represent OT network architecture with security and compliance, Connectivity architecture design and decision making.
- Define reference architectures standards and design frameworks for different OT networks.
- Responsible for designing, implementing, and governing secure, resilient, and scalable OT network architectures across industrial/manufacturing environments.
- Develop HLD/LLD, network diagrams, IP addressing schemes, routing and firewall policies, and architecture standards.
- Analyze different products from OEMs and make the right decisions that fits with technical and commercial aspects.
- Lead Zero Trust adoption for OT environments (ZPA/ZIA, Cisco ZTA).
- Drive architecture for multi-site, multi-region deployments.
- Define resiliency, redundancy, and failover strategies.
- Lead architecture reviews with Product, Cybersecurity, and Compliance.
- Influence vendor selection, technology standards, and long-term roadmaps.
- Work with cybersecurity teams on IDS/IPS, network monitoring, NAC, vulnerability management, and secure remote access.
- Coordinate with enterprise IT Network teams for IT/OT convergence and secure remote access.
Skills Needed :
- Networking (L2/L3) : Switching, STP, VLANs, BGP, OSPF, VRF, routing protocols.
- Firewall & Security : Cisco ASA / FTD / FMC, DMZ, Context design, segmentation.
- Zero Trust : ZPA / ZIA / Cisco ZTA, MFA, privileged access.
- Cloud AWS (Mandatory) : VPC, EC2, Transit Gateway, Direct Connect, virtual firewall.
- Enterprise proxy solutions : Hands-on experience with (SOCKS5, Squid, HAProxy, NGINX, Zscaler, Blue Coat, or F5).
- Standards (Awareness) : IEC 62443, NIST CSF, ISO 27001, Purdue Model.
Qualifications :
- Experience : 10 - 12 years in network engineering.
- Education : BTech / BCA / MCA.
- Certifications (Preferred) : CCNP / CCIE, AWS Advanced Networking, CISSP.
Skills
Network Security, IT Security Strategy, Security Architect, Firewall, Routing & Switching, Cloud, NIST, ISO, Vulnerability Management, IDS System