Network Security Architect

Network Security Architect – Zero Trust / Cisco Secure Workload Location: 100% Remote – Continental U.S. Schedule: Wednesday–Sunday or Thursday–Monday Employment: Full-Time About the Opportunity We are seeking an experienced Network Security Architect to support a major Zero Trust architecture implementation for a high-end financial services environment. This is not traditional steady-state NOC work. The position is centered around high-impact weekend cutovers, Zero Trust policy enforcement, application dependency mapping, and real-time troubleshooting where technical depth, preparation, and composure are equally important. You'll work alongside another architect and a broader technical team to ensure critical changes are properly planned, executed, validated, and—when necessary—rolled back without compromising service availability. What You'll Do - Execute readiness checks before scheduled cutovers and policy-enforcement windows. - Validate configurations, dependencies, risks, and rollback procedures prior to go-live. - Lead and support Zero Trust policy changes and network cutovers during scheduled maintenance windows. - Perform application dependency mapping using Cisco Secure Workload (CSW). - Use dependency data to support policy design, cutover planning, and risk assessment. - Perform post-change validation of network functionality and security-policy enforcement. - Troubleshoot complex issues in real time during live cutover events. - Execute rollback procedures when necessary to protect service availability. - Document readiness assessments, implementation results, and post-event findings. - Communicate technical status, risks, and issues clearly to technical and business stakeholders. - Maintain accurate project and time-tracking documentation. Required Qualifications - 3+ years of hands-on experience designing, operating, and troubleshooting Zero Trust data-center security environments. - Strong experience with technologies such as: - Microsegmentation - Next-Generation Firewalls - Network Access Control - Layer 3–7 security technologies - In-depth understanding of data-center networking protocols and principles. - CCNP Route/Switch, CCNP Security, or equivalent demonstrated technical experience. - Strong understanding of network-security concepts and architecture. - Ability to troubleshoot complex network and security issues during high-pressure production events. - Ability to communicate technical status and risk effectively to non-technical stakeholders. - Ability to work a Wednesday–Sunday or Thursday–Monday schedule supporting weekend cutovers. - U.S. citizenship and continental U.S. residency. - Ability to successfully complete the required Tier II-Credit Check - Enhanced federal background investigation and pre-employment drug screening. - Strong documentation and time-management discipline. Highly Preferred - 3+ years of hands-on Cisco Secure Workload (CSW) experience. - Cisco Application Centric Infrastructure (ACI) experience. - Network/security automation, scripting, or orchestration experience. - Advanced understanding of security protocols and architecture. - Experience managing Cisco TAC escalations through resolution. - Experience gathering and analyzing diagnostic evidence independently. - Previous experience supporting financial services or other highly regulated environments. - Previous federal background investigation or Public Trust experience. Schedule & Engagement - This is a full-time permanent position, not a fixed-term contract. - The weekend cutover schedule is expected to continue through approximately June 2027, after which the schedule is expected to transition toward standard business hours. - The position will operate as part of a broader technical team, with two architects supporting the weekend rotation—one primarily focused on Cisco Secure Workload and the counterpart focused on Cisco ACI. What Makes This Opportunity Different - This role is built for an engineer who performs well when the stakes are high. - You'll be working on scheduled, high-consequence infrastructure and security events where preparation matters, downtime matters, and your technical judgment matters. - You'll have significant autonomy during live events while operating within a structured readiness → cutover → validation → rollback methodology. - If your background combines data-center networking, Zero Trust, microsegmentation, Cisco technologies, and the ability to stay composed during critical production changes, this could be an excellent next step.