Network Architect

Role Purpose:

Lead the design of secure, compliant IT architectures tailored to financial services, with a focus on Zero Trust, network segmentation, and regulatory-aligned security integration. Drive vendor evaluations and guide cross-functional teams to ensure resilient, audit-ready infrastructure that supports business agility and risk management.

Core Technical Skills:

Enterprise Architecture Design

• TOGAF, Zachman, or similar frameworks
• Experience with architecture modeling tools (e.g., ArchiMate, Sparx EA)

Network Architecture & Security

• Network segmentation (macro/micro)
• Firewalls, VPNs, SD-WAN
• Secure perimeters and DMZ design

Zero Trust Architecture (ZTA)

• ZTNA solutions (e.g., Zscaler, Palo Alto Prisma Access)
• Policy-based access control
• Identity-aware proxies

Identity & Access Management (IAM)

• Integration with IAM platforms (e.g., Okta, Azure AD, Ping Identity)
• Multi-Factor Authentication (MFA)
• Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC)

Security Integration

• SIEM, SOAR, EDR/XDR platforms
• API-based integration of security tools
• CMDB integration (e.g., ServiceNow)

Cloud & Hybrid Environments

• Cloud architecture (AWS, Azure, GCP)
• Hybrid cloud security
• Cloud-native security tools (e.g., AWS GuardDuty, Azure Defender)

Main responsibilities:

• Actively participate in the RfI&RfP and PoC phase
• Define the network segments and perimeters including macro segmentation
• Define how to (dynamically) limit access by policy
• Define if and how existing security solutions can be integrated
• Vendor CMDB integration
• ZTNA IAM/MFA Integration