{"id":3014302,"url":"https://alion.io/job/richemont-network-security-architect","title":"Network Security Architect","company":{"id":1791761,"name":"Richemont","domain":"richemont.com","url":"https://alion.io/company/richemont","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":169,"ghost_share":0,"stale_share":0.994,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":100000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AIOps","optional":false},{"name":"Ansible","optional":false},{"name":"BGP","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OSPF","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-21T16:09:14Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T01:12:57Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Richemont, one of the world leaders in the luxury sector, has various Houses specializing in jewelry, watches and high-end accessories.Each Maison proudly embodies a tradition of style, quality and craftsmanship and Richemont strives to preserve the heritage and identity specific to each of them.At the same time, we are committed to innovating and designing new products in line with the values of our Houses, through a process of permanent creativity.\nBuild connectivity that earns trust\nShape the secure, resilient networks behind Richemont’s global luxury Maisons, connecting offices, distribution centers, data centers and the cloud. Combine architectural leadership with hands-on engineering in security, automation and responsible AI adoption.\nWhere you’ll make an impact\nShape the architecture from vision to reality\n- Define and own the reference architectures, standards, and technology roadmaps that guide our global network, spanning hybrid and multicloud environments.\n- Navigate the trade-offs between security, resilience, performance, and cost while collaborating closely with Cloud, Security, UC, Workplace, and Platform teams to deliver designs that scale and endure.\nMake security foundational, not an afterthought\n- Embed security by design by applying Zero Trust principles, identity-based controls, device posture checks, and least-privilege access across the architecture.\n- Drive the evolution of our secure access architecture, including SASE, SSE, and ZTNA while strengthening network segmentation and access control to stay ahead of emerging threats.\n- Design secure hybrid-cloud connectivity with controlled traffic flows and end-to-end encryption. Take ownership of PKI strategy, including certificate and key lifecycle management.\nFrom automation to delivery\n- Engineer automated network change pipelines using Python, APIs, and infrastructure-as-code frameworks like Ansible and Terraform.\n- Establish and maintain strong engineering foundations a trusted source of truth, Git-based peer review, CI/CD testing, drift detection, and secure secrets management.\n- Ensure every change ships with controlled rollout plans and tested rollback, making safe delivery the default, not the exception.\nEnable AI securely, use AI responsibly\n- Define the network and data boundaries that allow approved AI services to operate safely including private endpoints, controlled egress, identity-aware access, and workload segmentation. Collaborate with Cybersecurity on AI telemetry and data-loss prevention and set clear guardrails for AI agents' access to tools and APIs.\n- Explore and assess AI-assisted network operations and AIOps, with a clear focus on measurable, real-world impact. Validate AI-generated recommendations before they reach production. Keep sensitive configurations and secrets away from unapproved models. Champion human-in-the-loop governance with approval gates, audit trails, and safe rollback for every AI-driven change.\nKeep services resilient\nArchitect for failure and fast recovery across the full network landscape - wired, wireless, WAN, and cloud. Leverage telemetry and capacity analysis to deepen network observability and get ahead of problems before users feel them. Lead complex incident investigations through to validated recovery then turn every incident into a learning opportunity the wider team can build on.\nWhat you’ll bring\nEssential experience\n- Enterprise network architecture delivery, with hands-on routing, switching, Wi-Fi and troubleshooting; strong TCP/IP, BGP and OSPF; and WAN/VPN plus datacenter or software-defined networking experience.\n- Practical network security and hybrid-cloud connectivity experience, including identity-based access, segmentation and resilient design. Clear judgement on risks and trade-offs.\n- Hands-on Python/API automation with Ansible, Terraform or comparable tools, backed by version control, peer review, testing and safe delivery practices.\n- Hands-on and architectural experience with Cisco ISE, including 802.1X, TACACS+/RADIUS, profiling, posture, guest access, policy design, and segmentation models.\n- Architecture leadership, clear documentation and cross-team collaboration. Fluent English and a bachelor’s degree or equivalent practical experience.\nUseful, not essential\n- AI security or AIOps experience is welcome, not required.\n- Curiosity and disciplined learning matter. No model-training experience is needed.\n- Relevant certifications or equivalent practical experience are valued.\n- Our stack includes AWS/GCP; Cisco networking, Wi-Fi and ISE; RADIUS/802.1X; SD-WAN; Cato Networks; Zscaler ZIA/ZPA;\n- You don't need to master every product; experience with comparable technologies and transferable judgment are what truly count.\nJoin an international group of luxury Maisons with competitive compensation and opportunities to grow.\nReady to make secure, automated connectivity work in the real world? We’d like to hear from you.\n#Richemont #WeCraftTheFuture","description_format":"text","description_chars":4979,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Jewelry","Watches","Luxury Goods & Designer Brands"],"lifecycle":[{"event":"open","at":"2026-10-21T16:09:14Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.607,"p_room":0.9,"age_days":3,"expected_fill_days":9,"reasons":["conf:52","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/richemont-network-security-architect","json_url":"https://alion.io/job/richemont-network-security-architect.json","meta":{"generated_at":"2026-10-25T15:29:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22391,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1791761},"rest":"https://alion.io/mcp/rest/get_company?id=1791761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frichemont-network-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frichemont-network-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frichemont-network-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/richemont-network-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frichemont-network-security-architect"}]}