Senior Network Security Design Engineer

The organization seeks a senior-level expert to lead enterprise network architecture, design standards, and implementations across on-premises, cloud, and operational technology environments. This role focuses on executing network strategy, maintaining architectural consistency, and collaborating with security, cloud, and operations teams to provide secure, scalable global network services.

Key Responsibilities

• Oversee daily governance of LAN, WAN, WLAN, VPN, cloud networks, and OT environments, including platforms like wireless access, firewalls, secure web gateways, and security tools.
• Monitor network performance, health, and availability; conduct initial troubleshooting and escalate complex issues while supporting incident, change, and service request processes in line with SLAs.
• Guide network design for offices, data centers, and cloud services; optimize for better convergence, performance, latency, and resiliency; participate in architecture review boards.
• Manage vendors and technology partners; handle project workloads; consult with business units to convert requirements into technical architectures and designs.
• Serve as subject matter expert on network and security services; maintain up-to-date network diagrams, configurations, architecture documents (HLD/LLD), as-builts, asset records, and BOMs for audit readiness.
• Promote standardization, automation, and lifecycle management; provide high-priority operational support, incident troubleshooting, and vendor escalations.

Required Qualifications

• At least 3 years in project consulting, from business requirements to solution architecture and deployment; 5 years in operational support.
• Proven experience mentoring teams in network, security, and cloud areas.
• Strong knowledge of network security operations, including SIEM, WAF, IPS/IDS, cloud security, Microsoft 365, Linux/Windows systems, and endpoint protection.
• Hands-on design of secure Azure solutions (VMs, microservices, containers) following Azure Well-Architected Framework; familiarity with NIST CSF and MITRE ATT&CK.
• Practical expertise with enterprise platforms such as Cisco Meraki, Fortinet, Palo Alto, Zscaler (ZIA/ZPA), and CrowdStrike.

Supporting Skills

• Understanding of cybersecurity trends and threats.
• Proficiency in multi-tiered architectures, switching/routing (resiliency, VLAN, VPC/MLAG, HSRP/VRRP, NAT, IPsec, dynamic routing, WiFi), IaC, automation, APIs, trust zone segmentation, and zero trust principles.
• Awareness of ITIL practices; relevant certifications like CCIE/CCNP, Fortinet (FCX/FCSS/FCP), Zscaler (ZDTA/ZDTE/ZDXA), Azure (AZ-700/AZ-500/AZ-303/304), GIAC/SANS.
• Willingness to work regular hours plus on-call support outside business times.

Behavioral Expectations

• Systematic, organized approach with strong attention to detail, analytical problem-solving, and ability to work under pressure in dynamic settings.
• Excellent communication, stakeholder management, and interpersonal skills; comfortable raising issues and managing own workload with realistic timelines.
• Reliable, patient with users, independent, and focused on results and satisfaction.