Security Architect – Network & Cloud Solutions

About the role

We are seeking a senior Security Architect to design and implement end‑to‑end security solutions for our ISP and enterprise customers. The role blends deep technical expertise with a commercial mindset, requiring you to position security as a strategic value driver.

Key responsibilities

• Architect holistic security solutions across perimeter, internal segmentation, endpoint, cloud, and identity layers.
• Design network security architectures including NGFW, IPS/IDS, SD‑WAN security overlays, DDoS protection, and carrier‑grade NAT/CGN.
• Define End‑User Computing security – EPP, EDR/XDR, VDI security, email security, and web proxy/filtering.
• Build data‑centre security frameworks: micro‑segmentation, East‑West firewalls, WAF, PAM, and Zero Trust Architecture.
• Position and implement SASE/SSE solutions such as Zscaler, Prisma Access, and Cato Networks.
• Develop SOC design, SIEM architecture (Splunk, Microsoft Sentinel, IBM QRadar) and SOAR playbooks.
• Lead security assessments, gap analyses, and compliance mapping (ISO 27001, NIST, PCI‑DSS, GDPR, NCA ECC).
• Respond to security‑focused RFPs, create BoMs, and deliver technical presentations to CISO‑level stakeholders.
• Maintain OEM relationships with Palo Alto Networks, Fortinet, Check Point, Cisco, CrowdStrike, Microsoft, Zscaler, and Milestone.

Required profile

• Proven experience designing and delivering network, endpoint, and data‑centre security architectures.
• Strong commercial and pre‑sales capability to articulate security value.
• Ability to engage with senior security leaders and lead technical presentations.
• Experience with security compliance frameworks (ISO 27001, NIST, PCI‑DSS, GDPR, NCA ECC).

Required skills

• Palo Alto Networks: PAN‑OS, Panorama, Prisma Access, Prisma Cloud.
• Fortinet: FortiGate, FortiManager, FortiAnalyzer, FortiClient EMS.
• Check Point: SmartConsole, CPUSE, CloudGuard.
• Microsoft 365 Defender suite and Sentinel SIEM.
• Network segmentation (VLANs), SD‑WAN security overlays, DDoS protection, carrier‑grade NAT/CGN.
• Endpoint protection platforms, EDR/XDR, VDI security, email security, web proxy/filtering.
• Data‑centre security: micro‑segmentation, East‑West firewalls, WAF, PAM, Zero Trust Architecture.
• SASE solutions: Zscaler, Prisma Access, Cato Networks.
• SIEM platforms: Splunk, Microsoft Sentinel, IBM QRadar; SOAR playbooks.