Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Security Delivery Governance

Good to have skills : NA

Minimum 12 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary

Leads the implementation and delivery of Network Security Services projects with a primary focus on Palo Alto Networks and Cisco ISE, leveraging global delivery capabilities (methods, tools, training, assets). Responsible for end-to-end delivery, technical governance, stakeholder management, and leading security engineering teams across complex client environments.

As a Security Delivery Lead, you will lead the implementation and delivery of enterprise Network Security projects with a strong focus on Palo Alto Networks and Cisco ISE. You will be responsible for managing delivery teams, owning technical decisions, driving secure architecture, and acting as the primary escalation point for clients. Your role involves close collaboration with internal stakeholders, vendors, and customer leadership to ensure successful project execution, operational excellence, and consistent service delivery.

Roles & Responsibilities

• Lead design, implementation, and operational delivery of Palo Alto Next-Generation Firewalls in enterprise environments.
• Own firewall architecture, security policy design, NAT rules, App-ID, User-ID, and content security configurations.
  
  

Manage Panorama for centralized firewall policy management, upgrades, governance, and reporting.

• Implement and support Prisma SASE VPN for secure remote access and site-to-site connectivity.
• Lead deployment and operations of Cisco ISE for Network Access Control (802.1X, MAB, RADIUS, TACACS+).
• Integrate Cisco ISE with Active Directory and PKI/certificate services and define identity-based access policies.
• Enforce Zero Trust principles through device profiling, posture assessment, and policy enforcement using Cisco ISE.
• Act as the technical escalation point (L3/L4) for complex network security issues and incidents.
• Lead and manage network security engineers and delivery teams across multiple locations.
• Coordinate and lead technical discussions with clients, vendors, and internal stakeholders.
• Ensure platform health, capacity planning, high availability, and optimization of firewall and ISE environments.
• Drive creation and review of solution designs, architecture documents, SOPs, and runbooks.
• Identify and implement automation opportunities within network security operations.
• Ensure adherence to ITSM processes including incident, change, and problem management.
• Support hybrid security use cases including Prisma Access and Azure WAF integrations.
• Lead risk assessments, firewall rule reviews, audits, and continuous security posture improvement initiatives.
• Ensure SLA adherence, service quality, and delivery excellence across assigned projects.
  
  

Professional & Technical Skills

• Expert-level experience with Palo Alto Networks firewalls (NGFW, Panorama, Prisma SASE).
• Strong hands-on experience with Cisco ISE, including NAC policy design, authentication flows, and troubleshooting.
• Experience in solution design, HLD/LLD documentation, and security architecture definition.
• Exposure to Prisma Access (SASE) and Azure Web Application Firewall (WAF) in hybrid environments.
• Strong understanding of networking concepts including TCP/IP, routing, VPNs, VLANs, NAT, and segmentation.
• Experience with HA configurations, firmware upgrades, backup and restore strategies.
• Solid understanding of ITSM processes (incident, change, problem management).
  
  

Additional Information

• The candidate should have minimum 12 years of experience in Security Delivery Governance.
• This position is based at our JPDC3A - NON-STPI office.
• A 15 years full time education is required.