Network Security Architect

Location: 100% Remote Continental U.S.
Schedule: WednesdaySunday or ThursdayMonday
Employment: Full-Time

We are seeking an experienced Network Security Architect to support a major Zero Trust architecture implementation for a high-end financial services environment.

This is not traditional steady-state NOC work. The position is centered around high-impact weekend cutovers Zero Trust policy enforcement application dependency mapping and real-time troubleshooting where technical depth preparation and composure are equally important.

Youll work alongside another architect and a broader technical team to ensure critical changes are properly planned executed validated andwhen necessaryrolled back without compromising service availability.

• Execute readiness checks before scheduled cutovers and policy-enforcement windows.
• Validate configurations dependencies risks and rollback procedures prior to go-live.
• Lead and support Zero Trust policy changes and network cutovers during scheduled maintenance windows.
• Perform application dependency mapping using Cisco Secure Workload (CSW).
• Use dependency data to support policy design cutover planning and risk assessment.
• Perform post-change validation of network functionality and security-policy enforcement.
• Troubleshoot complex issues in real time during live cutover events.
• Execute rollback procedures when necessary to protect service availability.
• Document readiness assessments implementation results and post-event findings.
• Communicate technical status risks and issues clearly to technical and business stakeholders.
• Maintain accurate project and time-tracking documentation.

• 3 years of hands-on experience designing operating and troubleshooting Zero Trust data-center security environments.
• Strong experience with technologies such as:
  • Microsegmentation
  • Next-Generation Firewalls
  • Network Access Control
  • Layer 37 security technologies
• In-depth understanding of data-center networking protocols and principles.
• CCNP Route/Switch CCNP Security or equivalent demonstrated technical experience.
• Strong understanding of network-security concepts and architecture.
• Ability to troubleshoot complex network and security issues during high-pressure production events.
• Ability to communicate technical status and risk effectively to non-technical stakeholders.
• Ability to work a WednesdaySunday or ThursdayMonday schedule supporting weekend cutovers.
• U.S. citizenship and continental U.S. residency.
• Ability to successfully complete the required Tier II-Credit Check Enhanced federal background investigation and pre-employment drug screening.
• Strong documentation and time-management discipline.

• 3 years of hands-on Cisco Secure Workload (CSW) experience.
• Cisco Application Centric Infrastructure (ACI) experience.
• Network/security automation scripting or orchestration experience.
• Advanced understanding of security protocols and architecture.
• Experience managing Cisco TAC escalations through resolution.
• Experience gathering and analyzing diagnostic evidence independently.
• Previous experience supporting financial services or other highly regulated environments.
• Previous federal background investigation or Public Trust experience.

This is a full-time permanent position not a fixed-term contract.

The weekend cutover schedule is expected to continue through approximately June 2027 after which the schedule is expected to transition toward standard business hours.

The position will operate as part of a broader technical team with two architects supporting the weekend rotationone primarily focused on Cisco Secure Workload and the counterpart focused on Cisco ACI.

This role is built for an engineer who performs well when the stakes are high.

Youll be working on scheduled high-consequence infrastructure and security events where preparation matters downtime matters and your technical judgment matters.

Youll have significant autonomy during live events while operating within a structured readiness cutover validation rollback methodology.

If your background combines data-center networking Zero Trust microsegmentation Cisco technologies and the ability to stay composed during critical production changes this could be an excellent next step.