Principal Network Architect

Design and architect global network and security systems including firewalls, IDS, proxies, policy compliance tools, routers, switches, VPN hardware / software, and other security devices as specified.

Lead and execute network security projects in a diverse set of areas that include: intrusion detection, end point security, log file correlation, security information management, actively identify where new work efforts are required, and network / security metrics.

Take a leadership role in providing network security advice, such as risk analysis, to business units who engage with the Network Design and Engineering team.

Manage the relationship with various network and security vendors to ensure their products and services add value to organization.

Define, gather, and report metrics regarding network and security with the organization?s environment.

Act as a gatekeeper for operational requests related to network and security matters.

Provide vision for network and security direction and designs to achieve these agreed upon objectives.

Be a Team Lead to the firewall and network engineers, including developing the team members individually and as a group in order to achieve the next level.

Improve stability, availability, and scalability of the network and security infrastructure.

Develop a customer service orientation for the Network Design and Engineering team.


Required Skills:

Certified Information Systems Security Professional certification (CISSP) is required.

Certified Information Systems Auditor certification (CISA) is desired.

Cisco Certified Internetwork Expert certification (CCIE) is desired.

Check Point firewall certified preferred.

Experience with architecting and designing security infrastructures, understanding of how to design security devices, network and systems compliant with the requirements of a desired security posture or state is required.

Highly knowledgeable of security principles such as defense in depth, grandularity of privilege, etc. and how these are applied in the real world.

Expert understanding of intrinsic security weaknesses within the core infrastructure components such as TCP/IP, VPN, file transfer, proxy, and remote administration protocols.

Pragmatic understanding of security problems as a mix of technology and process issues with the ability to pursue solutions at both layers within the organization.