Network Security Architect

We are seeking an experienced Network Security Architect to support a critical migration initiative moving key applications and workloads to the AWS public cloud. This role will work closely with application teams, the security architecture group, and the perimeter defense team to define and implement network security requirements that ensure secure and compliant cloud adoption.Key Responsibilities:•Collaborate with application and infrastructure teams to gather and analyze network security requirements including connectivity, allowed ports, protocols, and data flows.•Translate application requirements into detailed and actionable network security policies and firewall rules.•Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.•Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.•Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.•Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.•Support troubleshooting and optimization of existing cloud network security configurations.Required Qualifications:•5+ years experience in network security architecture or engineering, preferably with a focus on cloud environments (AWS strongly preferred).•Strong understanding of network security controls: firewalls (Palo Alto experience highly desired), Security Groups, VPN, and layered defense models.•Proven ability to translate application connectivity needs into firewall rule sets and network security designs.•Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).•Experience working alongside application teams in a collaborative Agile or DevSecOps environment.•Excellent communication skills, capable of documenting and presenting complex technical information clearly.•Ability to work independently and drive results in a fast-paced, dynamic environment.Preferred Qualifications:•AWS certifications (e.G., AWS Security Specialty, Solutions Architect)•Experience with enterprise firewall policy management and automation tools.•Background in financial services or highly regulated environments.