Network Security Architect

Richemont, one of the world leaders in the luxury sector, has various Houses specializing in jewelry, watches and high-end accessories.Each Maison proudly embodies a tradition of style, quality and craftsmanship and Richemont strives to preserve the heritage and identity specific to each of them.At the same time, we are committed to innovating and designing new products in line with the values of our Houses, through a process of permanent creativity.

Build connectivity that earns trust

Shape the secure, resilient networks behind Richemont’s global luxury Maisons, connecting offices, distribution centers, data centers and the cloud. Combine architectural leadership with hands-on engineering in security, automation and responsible AI adoption.

Where you’ll make an impact

Shape the architecture from vision to reality

- Define and own the reference architectures, standards, and technology roadmaps that guide our global network, spanning hybrid and multicloud environments.

- Navigate the trade-offs between security, resilience, performance, and cost while collaborating closely with Cloud, Security, UC, Workplace, and Platform teams to deliver designs that scale and endure.

Make security foundational, not an afterthought

- Embed security by design by applying Zero Trust principles, identity-based controls, device posture checks, and least-privilege access across the architecture.

- Drive the evolution of our secure access architecture, including SASE, SSE, and ZTNA while strengthening network segmentation and access control to stay ahead of emerging threats.

- Design secure hybrid-cloud connectivity with controlled traffic flows and end-to-end encryption. Take ownership of PKI strategy, including certificate and key lifecycle management.

From automation to delivery

- Engineer automated network change pipelines using Python, APIs, and infrastructure-as-code frameworks like Ansible and Terraform.

- Establish and maintain strong engineering foundations a trusted source of truth, Git-based peer review, CI/CD testing, drift detection, and secure secrets management.

- Ensure every change ships with controlled rollout plans and tested rollback, making safe delivery the default, not the exception.

Enable AI securely, use AI responsibly

- Define the network and data boundaries that allow approved AI services to operate safely including private endpoints, controlled egress, identity-aware access, and workload segmentation. Collaborate with Cybersecurity on AI telemetry and data-loss prevention and set clear guardrails for AI agents' access to tools and APIs.

- Explore and assess AI-assisted network operations and AIOps, with a clear focus on measurable, real-world impact. Validate AI-generated recommendations before they reach production. Keep sensitive configurations and secrets away from unapproved models. Champion human-in-the-loop governance with approval gates, audit trails, and safe rollback for every AI-driven change.

Keep services resilient

Architect for failure and fast recovery across the full network landscape - wired, wireless, WAN, and cloud. Leverage telemetry and capacity analysis to deepen network observability and get ahead of problems before users feel them. Lead complex incident investigations through to validated recovery then turn every incident into a learning opportunity the wider team can build on.

What you’ll bring

Essential experience

- Enterprise network architecture delivery, with hands-on routing, switching, Wi-Fi and troubleshooting; strong TCP/IP, BGP and OSPF; and WAN/VPN plus datacenter or software-defined networking experience.

- Practical network security and hybrid-cloud connectivity experience, including identity-based access, segmentation and resilient design. Clear judgement on risks and trade-offs.

- Hands-on Python/API automation with Ansible, Terraform or comparable tools, backed by version control, peer review, testing and safe delivery practices.

- Hands-on and architectural experience with Cisco ISE, including 802.1X, TACACS+/RADIUS, profiling, posture, guest access, policy design, and segmentation models.

- Architecture leadership, clear documentation and cross-team collaboration. Fluent English and a bachelor’s degree or equivalent practical experience.

Useful, not essential

- AI security or AIOps experience is welcome, not required.

- Curiosity and disciplined learning matter. No model-training experience is needed.

- Relevant certifications or equivalent practical experience are valued.

- Our stack includes AWS/GCP; Cisco networking, Wi-Fi and ISE; RADIUS/802.1X; SD-WAN; Cato Networks; Zscaler ZIA/ZPA;

- You don't need to master every product; experience with comparable technologies and transferable judgment are what truly count.

Join an international group of luxury Maisons with competitive compensation and opportunities to grow.

Ready to make secure, automated connectivity work in the real world? We’d like to hear from you.

#Richemont #WeCraftTheFuture