Security Solutions Architect (SSE/SASE)

T

Talentuch

Security Solutions Architect (SSE/SASE)

Remote,
Full Time
Paid
  • Responsibilities

    As a Security Solutions Architect, you'll get into the details of our platforms. You will push the buttons, flip the levers, and turn the knobs. You do not shy away from difficult challenges as they relate to networking, cybersecurity, implementations, migrations, and integrations. You are the technical authority and will interact directly with our customers to help them transform their networks. Our customers are counting on you to perform this work and train their staff. Critical to this role is a solid foundation in networking and security technologies. This role specifically seeks individuals with deep expertise in Secure Access Service Edge (SASE), network firewall technologies, and network security architecture. A plus is SD-WAN experience.

    Responsibilities:

    • Provide technical network architectural solutions based on customer business requirements with a strong focus on SASE frameworks, firewall configurations, and security best practices.

    • Analyzes requirements by evaluating customer business needs and technical requirements and develops and implements them into a finished working deliverable.

    • Ability to work cross-functionally with the customers security & network teams to build confidence across business units partnered in the transformation to ensure robust security architecture and SASE integration.

    • Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope.

    • Research network and security trends, current events, standards, and practices to identify needs for enhancing network solutions with a focus on emerging SASE models and advanced firewall technologies.

    • Accepts ownership of tasks, can independently drive to completion, and seek guidance of more senior team members as needed.

    • Participate actively in knowledge sharing activities like communities of practice, forums, conferences and/or other knowledge exchanges to improve security architecture/engineering practices.

    • Provide level of effort breakdown estimates for facilitating Statements of Work or Change Orders to Clients in partnership with Sales Engineering.

    • Identify functional and non-functional requirements (In scope/Out of Scope).

    • Validate requirements with customer stakeholders.

    • Perform and lead the Implementation of technical solutions (proof of concepts/pilots, or production-ready systems) to meet or to prove the functional requirements.

    • Experience with configuration, installation, and support of firewalls – both physical and virtual is a must.

    • Knowledge transfer to new team members, provide technical directions and help other team members.

    • Perform duties such as leading client-facing discovery and design workshops as well as participating in stand-ups, planning, kick-off meetings, cutovers, deployments, retrospectives and presenting team progress to leadership and customers.

    • Deploy and configure hardware and software as required for internal and customer support.

    • Maintain current production systems.

    • Deploy and implement SASE solutions based on industry and platform best practices.

    • Abide by strict change management, policies, both internal and external.

    • Provide Clients with documentation including but not limited to High Level Design's, Low Level Design's, Implementation plans, and As-Builts.

    Required Technical and Professional Expertise:

    • Strong experience with SASE architecture, including integration and deployment.

    • Integrating SD-WAN with cloud-delivered security services (e.g., CASB, ZTNA, SWG, FWaaS).

    • Expertise in network firewall technologies such as Fortinet, Palo Alto, and Cisco.

    • Proven track record in designing and implementing SASE solutions.

    • 7-10 years of experience as a Network Firewall Engineer, Cyber Defense Engineer, Security Engineer, or Network Architect/Network Engineer.

    • Strong understanding of Routing protocols (eBGP,iBGP, OSPF, EIGRP).

    • Strong understanding and experience implementing Class of Service (CoS).

    • Thorough understanding of all layers of the OSI model.

    • Consulting experience (via Contractor, Independent, VAR, etc).

    • Strong experience leading enterprise technical implementations.

    • Effectively handle multiple projects simultaneously and work calmly under pressure.

    • An excellent writer with strong verbal and social skills, with demonstrated ability to communicate with senior leaders, technical peers, and non-technical partners.

    • Excellent time management and organization skills.

    • Position will require some after business-hours network transformation deployment and cutover work.

    • SASE experience is a must.

    • Strong understanding of SASE concepts including layered security, network segmentation, zero trust, DLP, CASB, and compliance.

    • Fortinet and FortiGate SD-WAN and EMS experience is a plus.

    • Cisco Viptela experience is a plus.

    • Palo Alto Networks Prisma SD-WAN and SASE (formerly Cloudgenix) experience is a plus.

    • AWS/Azure/GCP experience is a plus.