senior network security architect

AHU Technologies

<div><div><div>Job Description: 
</div><div>Short Description: 
</div><div>16+ years of experience. Analyzes, designs, and implements networks to withstand security intrusions. 
</div><div>Complete Description: 
Employment Type: Contract w2/1099/C2C 
</div><div>The role involves supporting the replacement, lifecycle management, and upgrade of networking equipment such as switches, routers, firewalls, and related hardware across the agency&rsquo;s environment. The specialist develops and maintains detailed network documentation, including logical and physical diagrams, system interfaces, rack elevations, cabling records, and equipment inventories for 911 and 311 operations. They also maintain thorough configuration documentation, standard operating procedures, change records, and disaster recovery materials specific to mission‑critical systems. The position monitors network performance, identifies vulnerabilities or bottlenecks, and implements corrective measures to ensure high availability for 24/7 emergency communications. Additionally, the specialist troubleshoots complex network issues affecting 911 operations, performs root‑cause analysis, and restores service rapidly. The role includes managing and supporting two data centers hosting critical 911 applications, ensuring continuous availability, redundancy, and compliance with public‑safety requirements. 
 
 
CONTRACT JOB DESCRIPTION 
 Responsibilities: 
</div><ul><li>Knowledge of network analysis related to infrastructure design.</li>
<li>May be an expert in security or intrusion detection.</li>
<li>Proficient in proprietary network technology.</li>
<li>Advanced experience with, but not limited to, routers, firewalls, switches, and servers.</li>
<li>Advanced knowledge in network analysis.</li>
<li>Advanced problem resolution and project management skills.</li>
<li>Designs and implements class wide area networks.</li>
<li>Experience with Firewalls, VPN, encryption, intrusion detection and prevention systems, and penetration testing.</li>
<li>Knowledge of network vulnerabilities and be able to mitigate and prevent each one.</li>
<li>Supporting the replacement, lifecycle management, and upgrade of networking equipment, including core, distribution, and access layer switches; routers; firewalls; and related hardware used across the agency&rsquo;s network environment</li>
<li>Creating, maintaining, and improving detailed network diagrams for all agency systems, including logical network maps, physical connectivity diagrams, and system‑to‑system interfaces used by 911 and 311 operations.</li>
<li>Developing and maintaining rack elevation diagrams, equipment inventories, and cabling documentation for data centers, communications rooms, and remote agency sites</li>
<li>Preparing and maintaining documentation of network configurations, standard operating procedures, change records, and disaster recovery materials specific to the 911 environment.</li>
<li>Monitoring network performance and availability, identifying bottlenecks or vulnerabilities, and implementing corrective actions to ensure the resiliency required for 24/7 emergency communications</li>
<li>Troubleshooting complex network issues affecting critical 911 operations, conducting root‑cause analysis, and restoring service quickly while documenting findings</li>
<li>Managing and supporting two data centers that host mission‑critical 911 applications, ensuring continuous availability, redundancy, and compliance with public‑safety operational requirements</li>
</ul><div>Minimum Education/Certification Requirements: 
Bachelor&rsquo;s degree in IT or related field or equivalent experience 
</div><div>Skills Matrix 
</div><ul><li>16+ yrs. analyzing networks related to infrastructure design</li></ul> 
<ul><li>16+ yrs. identifying best practices and standards for the use of the product</li></ul> 
<ul><li>16+ yrs. supporting and designing industry specific technologies that require integration with systems or networks</li></ul> 
<ul><li>Bachelor&rsquo;s degree in IT or related field or equivalent experience</li></ul></div></div>

Senior Network Security Architect

Dragonfli Group LLC

<div>ABOUT DRAGONFLI GROUP
Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal, state, and municipal government agencies as well as Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments. 
ROLE SUMMARY
Dragonfli Group is seeking an experienced Senior Cloud Security Architect to support a federal government client. In this role, you will lead the strategic vision for protecting a large-scale multi-cloud ecosystem, designing security blueprints that govern the entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This position requires a &quot;Security as Code&quot; mindset, where automated guardrails empower development teams to move at speed without compromising data or infrastructure safety.
The ideal candidate brings 12+ years of cybersecurity experience, with at least 6 years architecting secure cloud environments at scale across AWS, Azure, or GCP. You will serve as a trusted security advisor, bridging the gap between DevOps agility and rigorous regulatory compliance in a high-visibility federal environment. 
KEY RESPONSIBILITIES<ul><li>
Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, and/or GCP</li><li>
Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors</li><li>
Develop and enforce enterprise-wide security policies using Infrastructure-as-Code tools (e.g., Terraform), ensuring non-compliant infrastructure is automatically remediated or blocked from deployment</li><li>
Design and oversee integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions</li><li>
Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and blast-radius scenarios to strengthen system resilience</li><li>
Drive the organization's transition to a Zero Standing Privilege model for all production environments</li><li>
Achieve automated auditing for core compliance frameworks, including NIST and CIS Benchmarks</li><li>
Leverage AI-driven monitoring to minimize Mean Time to Detect (MTTD) anomalous cloud activity</li><li>
Act as lead security advisor for the Cloud Architecture team, bridging DevOps agility with rigorous regulatory compliance (SOC 2, FedRAMP)</li><li>
Communicate security risks, architecture decisions, and roadmap recommendations clearly to C-suite and executive stakeholders</li><li>
Embed automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines as part of a mature DevSecOps practice</li></ul> 

Requirements: 
 
Must-Have Qualifications<ul><li>
12+ years of experience in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale</li><li>
Demonstrated expertise designing and implementing Zero Trust architectures across multi-cloud environments (AWS, Azure, or GCP)</li><li>
Expert knowledge of Identity-First Security, including Cloud Infrastructure Entitlement Management (CIEM), Just-In-Time (JIT) access provisioning, and complex OIDC/SAML federation flows</li><li>
Hands-on proficiency with cloud-native security suites: AWS Security Hub, Azure Defender, and/or GCP Security Command Center</li><li>
Experience developing Policy as Code frameworks using Terraform or equivalent IaC tooling for automated compliance enforcement</li><li>
Proficiency in scripting and automation languages (Python, Go, or Bash) for custom security automations and SOAR platform integration</li><li>
Deep experience embedding security testing (SAST/DAST/SCA) into CI/CD pipelines within a DevSecOps framework</li><li>
Advanced understanding of secure cloud networking, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA)</li><li>
Working knowledge of CNAPP and CSPM tooling for cloud posture management and misconfiguration remediation</li><li>
Familiarity with regulatory and compliance frameworks including NIST, CIS Benchmarks, and SOC 2</li></ul> 
Preferred / Desired Qualifications<ul><li>
Advanced degree in Computer Science, Cybersecurity, or a related engineering discipline</li><li>
Active top-tier security certifications (e.g., CISSP, CCSP, AWS Security Specialty, GCP Professional Cloud Security Engineer, Azure Security Engineer Associate, or equivalent)</li><li>
Prior experience in a federal government or public-sector consulting environment; familiarity with FedRAMP and FISMA compliance</li><li>
Experience architecting security frameworks for AI/ML pipelines and LLM-integrated applications</li><li>
Proven track record implementing Zero Standing Privilege models in large enterprise or government environments</li><li>
Experience operating at the executive advisory level, presenting security risk posture and roadmap to C-suite leadership</li><li>
Familiarity with SOAR platforms and AI-driven threat detection tooling for cloud environments</li></ul> 

Skill(s): 
 
TECHNICAL SKILLS
Cloud Security Platforms<ul><li>
AWS Security Hub, Amazon GuardDuty, AWS IAM, AWS Organizations SCPs</li><li>
Microsoft Azure Defender for Cloud, Azure Sentinel, Azure Active Directory / Entra ID</li><li>
Google Cloud Security Command Center, Chronicle SIEM</li></ul>
Identity &amp; Access Management<ul><li>
Cloud Infrastructure Entitlement Management (CIEM)</li><li>
Just-In-Time (JIT) access provisioning frameworks</li><li>
OIDC, SAML 2.0, OAuth 2.0 federation and SSO architectures</li></ul>
Automation &amp; DevSecOps<ul><li>
Infrastructure as Code: Terraform, AWS CloudFormation, Pulumi</li><li>
Scripting: Python, Go, Bash</li><li>
CI/CD security integration: SAST, DAST, SCA tooling (e.g., Snyk, Checkov, Semgrep)</li><li>
SOAR platforms: Splunk SOAR, Microsoft Sentinel Automation, Palo Alto XSOAR</li></ul>
Cloud Networking &amp; Perimeter<ul><li>
Zero Trust Network Access (ZTNA) architecture and implementation</li><li>
Cloud WAF, SD-WAN, and secure connectivity design</li><li>
Network micro-segmentation and east-west traffic controls</li></ul>
Compliance &amp; Governance<ul><li>
NIST SP 800-53, CIS Benchmarks, SOC 2, FedRAMP, FISMA</li><li>
CNAPP and CSPM tools: Prisma Cloud, Wiz, Orca Security, or equivalent</li><li>
Threat modeling methodologies: STRIDE, MITRE ATT&amp;CK for Cloud</li></ul> 

Benefits: 
 
Dragonfli Group offers a comprehensive benefits package to support the health, financial well-being, and work-life balance of our team members:<ul><li>
Insurance &ndash; Comprehensive health, dental, and vision coverage for employees and eligible dependents</li><li>
Paid Time Off (PTO) and 11 Federal Holidays &ndash; Generous PTO accrual plus all 11 federally recognized holidays</li><li>
401(k) with Employer Match &ndash; Competitive employer match to support your long-term financial goals</li></ul></div>

Senior Cloud Security Architect

Atos

<div><div>About Atos Group</div> 
<div></div>
<div>
Atos Group is a global leader in digital transformation with c. 63,000 employees and annual revenue of c. &euro;8 billion, operating in 61 countries under two brands &mdash; Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris.</div> 
<div></div>
<div>
The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.</div>
1.1. Position Overview

The Senior Presales Cybersecurity Solution Architect is a critical, high-impact role responsible for leading and shaping technology and transformation initiatives for Atos&rsquo; clients as part of Atos KSA/MET Growth Plan and Execution framework. This role demands a blend of deep technical expertise, strategic business acumen, and leadership to translate customer business outcomes into robust, future-ready end-to-end architectural solutions and executable roadmaps.

1.2. Roles &amp; Responsibilities

In Technology Consultancy &amp; Advisory (Cybersecurity)
<ul>
<li>Strategic Visioning: Assess and collaborate with customer CXOs and Technology Leaders in leading and building business outcome-driven technological transformational vision, SMART objectives, green/brown field strategies, and program charters.</li>
<li>Enterprise Architecture Leadership: Define, design, and govern the Enterprise Architecture (business, technical data &amp; security) leveraging frameworks like TOGAF and Zachman 5to produce strategic blueprints.</li>
<li>Feasibility &amp; Modernization: Conduct detailed feasibility analysis (including the 6R Modernization model, Greenfield/Brownfield assessment) 7to define and guide MVP-based roadmaps.</li>
<li>Program Definition: Create business cases for multi-year programs, defining MVP-based roadmaps and wave-based rollouts through agile/waterfall/hybrid delivery models.</li>
<li>Compliance &amp; Security: Ensure the strategic blueprint is regulatory-compliant, such as PDPL, CCRF, NCA, GDPR, and ISO 27001.</li></ul> 


In Opportunity to Contract (O2C)
<ul>
<li>Partnership: Partner with Account Executives and Sales Leaders to drive Atos&rsquo; strategic logos/accounts and proactively establish strong, influential customer engagement to win and deliver contracts</li>
<li>Value Realization: Lead Customer requirements and RFI/RFP/RFQ responses promptly to deliver end-to-end futuristic Solutions for the exact scope with Atos&rsquo; USPs, ensuring focus on key commercial metrics, including T2V, TTM, TCO, xLAs, quality, cost, and profitability.</li>
<li>Portfolio &amp; Partnerships: Drive the Atos Offering Portfolios and utilize Atos&rsquo; strategic global and local technology product and service partnerships.</li>
</ul>1.3. Key Deliverables &amp; Expected Outcomes

The following are the deliverables to customers as part of the assessments and solutions.
<ul>
<li>Architectural Artifacts: Creation and presentation of comprehensive Atos Portfolios &amp; Capabilities aligned to customers&rsquo; vision, Business Requirements, Strategy architecture blueprints, and security models.</li>
<li>Business Cases: Development of detailed business cases, including Business Values, Total Cost of Ownership (TCO), and Return on Investment (ROI).</li>
<li>Roadmap Execution: Definition of MVP-based roadmaps and wave-based rollouts.</li>
<li>AI4Security and Security4AI: Need to have strong experience and understanding of the AI aspects in security, including data governance.</li></ul> 


1.4. Required Skills &amp; Expertise
1.4.1. Technical &amp; Architectural Skills
<ul><li>Experience: 15+ years in Information Technology, including over 5 years in senior architecture roles, with a proven track record of leading enterprise solutions at C-level and next-tier leadership.</li>
<li>Industry Expertise: In-depth knowledge of Public Sector, Government, Energy, and Financial Services domains, particularly within the KSA market, delivering transformational solutions aligned with strategic objectives.</li>
<li>Cybersecurity Leadership: Extensive experience architecting and implementing comprehensive cybersecurity strategies, engaging stakeholders at the C-suite and executive levels to address risk posture, compliance, and regulatory requirements.</li></ul> 


1.4.2. Foundational Skills
<ul><li>Collaborate with sales engineers to assess security requirements, compliance obligations, and organizational risk posture.</li>
<li>Design comprehensive cybersecurity solutions, including network security (firewalls, IDS/IPS, Zero Trust), cloud security (secure landing zones, IAM, encryption, compliance), SOC and SIEM architecture, and data protection (DLP, encryption, key management).</li>
<li>Create detailed architectural documentation and ensure all solutions adhere to industry standards and regulatory frameworks such as ISO 27001, NIST, and GDPR.</li>
<li>Support proof-of-concepts, technical workshops, solution validation, and customer presentations.</li>
<li>Architect and size solutions tailored to customer requirements, working closely with internal and global teams to prepare proposals, respond to RFPs, and integrate partner offerings where appropriate.</li>
<li>Demonstrate innovation and maintain strong customer relationships as a senior technical architect throughout the solution lifecycle.</li>
</ul>1.4.3. Essential Soft Skills
<ul><li>Communication &amp; Presentation: Exceptional verbal and written communication skills, including the ability to conduct impactful workshops, high-stakes presentations, and Convergence Views for executive audiences.</li>
<li>Strategic Leadership: Ability to lead cross-functional teams through vision and influence.</li>
<li>Stakeholder Management: Proven ability to build strong, influential relationships with CXOs, Sales, and Engineering teams.</li>
<li>Bilingual Proficiency: English and Arabic-speaking is a significant plus due to the requirement to engage with KSA-based CXOs and government entities.</li></ul> 


1.5. Key Performance Indicators (KPIs) &amp; Success Metrics
For Customers, the following are the KPIs &amp; Success Metrics of consulting and solutions.
<ul>
<li>TCO/ROI Accuracy: Accuracy of estimated TCO and ROI in approved business cases versus actual program performance.</li>
<li>T2V/TTM Improvement: Demonstrated reduction in Time to Value (T2V) and Time to Market (TTM) for key transformation programs.</li>
<li>Compliance Adherence: Zero critical compliance or regulatory breaches attributable to the solution blueprint.</li>
<li>Stakeholder Alignment Score: Internal and external feedback score reflecting the effectiveness of engagement and alignment.</li></ul> 


For Atos, the following are the Pre-sales excellence KPIs and Success Metrics
<ul>
<li>Business Growth: Order Entry, Revenue, Profitability (PM &amp; OM), and Customer Satisfaction for all the deals</li>
<li>Efficiency and Effectiveness: Delivering quality solutions and value adds as part of the solution with proactive offerings and partnerships.</li>
<li>Win Rate for Strategic Accounts: Percentage of RFI/RFP/RFQ responses that result in a successful contract award.</li></ul></div>

Senior Presales Cybersecurity Solution Architect

Halan - حالا

<div>
 
 
 Job Overview:
 
 
 
 
 
 
 We are looking for a
 
 Senior Network Security Engineer
 
 to ensure a reliable, secure, and efficient data
 
 
 communications network. In this role, you will be responsible for deploying, configuring,
 
 
 maintaining, and monitoring network infrastructure to support seamless operations.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 
 
 
 
 &bull;Support, configure, maintain, and upgrade network systems.
 
 
 &bull;Monitor security logs and firewalls to identify and mitigate threats.
 
 
 &bull;Ensure network security, connectivity, and performance optimization.
 
 
 &bull;Troubleshoot and Configure Cisco and Dell Switches (L2/L3), NAC solutions (Forti NAC),
 
 
 and firewalls (Palo Alto, FortiGate, Forcepoint).
 
 
 &bull;Implement and manage and operation Firewalls (Forcepoint, Palo Alto and FortiGate)
 
 
 &bull;Working with IP routing protocols: OSPF, EIGRP and BGP, configuring routing with
 
 
 automatic fail-over solutions between connections.
 
 
 &bull;Implement and Troubleshoot Remote Access Solutions: IPsec, SSL VPN.
 
 
 &bull;Implement and troubleshoot site to site VPNs between DC and Clients.
 
 
 &bull;Hardening Network devices according to PCI requirements.
 
 
 &bull;Remediate any vulnerabilities discovered related to network scans to match PCI DSS.
 
 
 &bull;Configure and manage WAF, LTM (F5), VPNs, and IPS/IDS solutions.
 
 
 &bull;Configuring various advanced WAF and ADC features (Profiles, monitors, Load balancing, HTTP Redirects, SSL offloading, Outbound data theft protection, DDOS Protection, Session persistence, Cloaking, iRules and Analytics polices).
 
 
 &bull;Manage user accounts, permissions, and network policies.
 
 
 &bull;Monitor system utilization, performance, and capacity planning.
 
 
 &bull;Configure and troubleshoot and Manage Cisco CUCM.
 
 
 
 
 
 
 Requirements:
 
 
 
 
 
 
 &bull;3 to 5 years of experience in network security.
 
 
 &bull;CCNP, NSE certifications are Plus
 
 
 &bull;Strong knowledge of EPP, PAM, EDR, and Sandbox technologies.
 
 
 &bull;A proactive and responsible professional with a strong problem-solving mindset.
 
</div>

Senior Network Security Engineer

geidea

<div>
 
 Established in 2008, Geidea epitomizes customer focused empowerment and commercial success through continuous innovation.
 
 
 Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market
 
 
 Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity.
 
 
 Our technology mirrors our people - Smart, Innovative &amp; Forward Thinking
 
 
 www.geidea.net
 
 
 
 
 
 To maintain a competitive advantage as we grow, we are currently looking for a new "Senior Network Security Engineer"
 
 
 
 
 
 
 Job purpose:
 
 
 
 Ensure the integrity, confidentiality and high availability of Network infrastructure including Network Security across all Geidea regions to provide the maximum performance and to meet the defined SLA.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Ensure the running of Geidea Network security infrastructure in KSA, UAE, India, Egypt smoothly including configuration, monitoring &amp; troubleshooting of (CISCO Routers and switches) and Firewalls (Fortigate, Palo Alto), F5, and any new technology assigned.
 </li>
 <li>
 Configure and maintain all PCI rules -For Network and security devices for Geidea PCI Scope
 </li>
 <li>
 Provide and solve L3 level Support &amp; networking complex problems.
 </li>
 <li>
 Ensure coverage of all factors that might affect the network and security areas, and that the security equipment is installed at the precise network location.
 </li>
 <li>
 Prepare and update all documents related to NOC, LAN, WAN &amp; NSP Network infrastructure including HLD, LLD Diagrams.
 </li>
 <li>
 Ensure accurate recording of all cases using the company&rsquo;s ticket management tool and closing within agreed timeframes.
 </li>
 <li>
 Review and apply the best practices related to PCI-DSS &amp; other Security Framework applied by the Network team.
 </li>
 </ul>
 
 
 Qualifications:
 
 
 <ul>
 <li>
 5-8 years of experience in a similar role
 </li>
 <li>
 Bachelor&rsquo;s degree in computer science or IT is a plus.
 </li>
 <li>
 CCIE certificate is a plus
 </li>
 <li>
 Vendor specific certifications like F5, Palo alto, FortiGate are a must
 </li>
 <li>
 Fin-tech background is a plus
 </li>
 <li>
 Extensive knowledge in documentation and designing
 </li>
 <li>
 PCI-DSS background is a plus
 </li>
 <li>
 Knowledge in F5, firewalls and router switches
 </li>
 </ul>
 
 
 Our values guide how we think and act - They describe what we care about the most
 
 
 
 
 C
 
 ustomer first - It&rsquo;s embedded in our design thinking and customer service approach
 
 
 
 O
 
 pen - Openness allows us to constantly improve and evolve
 
 
 
 R
 
 eal - No jargon and no excuses!
 
 
 
 B
 
 old - Constantly challenging ourselves and our way of thinking.
 
 
 
 R
 
 esilient &ndash; If we fail, we bounce back stronger than before.
 
 
 
 C
 
 ollaborative - We know that we can achieve a lot more as a team.
 
 
 We are changing lives by constantly striving for a better solution.
 
</div>

HCA Healthcare

<div>Are you passionate about the patient experience? At HCA Healthcare, we are committed to caring for patients with purpose and integrity. We care like family! Jump-start your career as a Senior Network Security Engineer today with HCA Healthcare.
<h5 class="jobSectionHeader">Job Summary and Qualifications</h5>
<h5 class="jobSectionHeader">JOB SUMMARY
Lead efforts in implementation, modernization, standardization and enhancement of network security controls to protect a Fortune 100 enterprise&rsquo;s infrastructure, patients and data from increasing risk and threats. The position will perform and oversee reviews and assessments of policies for risk and vulnerabilities and identify potential hardening opportunities, provide remediation recommendations, designs and solutions while implementing configuration changes for continuous security control maturity and risk reduction.
This position will work collaboratively with other IT teams to implement risk management practices, optimize technology solutions, monitor and adjust infrastructure to meet current and future needs, ensure compliance with regulatory requirements, and continuously plan for the future to improve our security posture and control maturity. The ideal candidate will be experienced in network security fundamentals and have a strong understanding of how to develop and implement remediation plans to address identified risks, implement new features and technologies, standardize and optimize existing technologies, establish and maintain baselines, and automate processes wherever possible to increase efficiency and reduce errors.
GENERAL RESPONSIBILITIES
Responsibilities include but are not limited to the following;
<ul><li>Evaluate, recommend and implement appropriate security measures, including next-generation firewall features, intrusion detection/prevention systems, VPN, network segmentation/zero trust, multifactor and access control mechanisms</li></ul>
<ul><li>Conduct firewall rule reviews, security audits, baseline and best practice compliance, forensic network investigation to support data transmission adherence and implement or oversee recommendations</li></ul>
<ul><li>Support and manage network security solutions to protect the organization's infrastructure, applications, and data from cyber threats in accordance with regulatory and industry requirements, such as PCI DSS, SOX, NIST, ISO 27000 and HIPAA</li></ul>
<ul><li>Evaluate vulnerability assessments, penetration tests, metrics and security audits to identify potential hardening opportunities and provide remediation recommendations and solutions.</li></ul>
<ul><li>Recommend and implement complex solutions and configuration changes within a large enterprise network in support of continuous security control maturity and risk reduction</li></ul>
<ul><li>Participate in incident response and disaster recovery planning and testing</li></ul>
<ul><li>Collaborate with other IT teams to ensure that network security controls are integrated with other systems, applications and comply with security standards</li></ul>
<ul><li>Routinely perform audits and control tests on deployed technologies, collecting and consolidating indicators of performance, risks, trends and providing recommendations, baseline and regulatory compliance ratings.</li></ul>
<ul><li>Manage relationships with vendors and contractors to ensure that security services are timely delivered and implemented in alignment to security policies</li></ul>
<ul><li>Collaborate on the development and documentation of security policies and procedures, training and awareness.</li></ul>
<ul><li>Provide guidance and training to peers on compliance and best practices.</li></ul>
<ul><li>Research design enhancements and identify automated solutions or best of breed technologies while assisting with integration tests with vendors.</li></ul>
<ul><li>Keep up-to-date with the latest threats and vulnerabilities, as well as relevant regulations and industry best practices, and implement recommendations to improve the organization's security posture and control maturity.</li></ul>
EDUCATION AND EXPERIENCE
Bachelor&rsquo;s degree preferred
Must have 5+ years of relevant work experience required
OTHER/SPECIAL QUALIFICATIONS
Extensive experience with security technologies, such as next-generation firewalls, intrusion detection/prevention systems, VPN, network segmentation, access control mechanisms, and security design, management, best practices, policy, standards in large 1000+ firewall environments.
Expertise in Checkpoint Firewall, CMA, Provider-1, Maestro, VSX/VSLS, CloudGuard
Cisco Network Security Products &amp; Technologies (i.e. Firepower, ASA, VPN, WSA, ISE, Stealthwatch, etc.)
Strong understanding of network protocols, topologies, tools, subnetting and architectures
Aptitude in Network Security Policy Management tools (Algosec, Tufin) and/or conducting risk assessments, firewall rule review, and security audits
Strong knowledge of enterprise security technologies and processes (Zscaler, Advanced Threat Detection Tools, Antibot, Antimalware, Threat Emulation, SIEM, IDS/IPS, Network Packet Analysis, Netflow, etc.)
Experience designing solutions for security standards and frameworks, such as HIPAA, SOX, PCI DSS, HITECH, ISO/IEC 27001, and NIST Cybersecurity Framework
Network Security Management Tools/Technologies (e.g: Splunk, Trustsec, segmentation, syslog, etc..)
Excellent verbal and written communication, interpersonal, analytical and problem-solving skills.
Demonstrated leadership and mentorship skills, with the ability to guide and train junior engineers
Ability to work independently and as part of a team
Relevant certifications from ISC2 (CISSP), GIAC (GISP), ISACA (CISA), Cisco Security or CompTIA are a plus
PHYSICAL DEMANDS/WORKING CONDITIONS
<ul><li>Position expectations are minimal supervision required due to design, service and support knowledge/skillsets</li></ul>
<ul><li>Position may require periodic after hours work and light travel at times with little notice</li></ul>
<ul><li>Position requires sitting for extended periods. In office requirement minimum 2 days per week.</li></ul>
Benefits</h5>
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services</li><li>
Wellbeing support, including free counseling and referral services</li><li>
Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence</li><li>
Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling</li><li>
Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing</li><li>
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location.
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses. 
&quot;The great hospitals will always put the patient and the patient's family first, and the really great institutions will provide care with warmth, compassion, and dignity for the individual.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Senior Network Security Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

NYU Langone Health

<div>NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News &amp; World Report recently placed nine of its clinical specialties among the top five in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.
 
 
For more information, go to NYU Langone Health, and interact with us on LinkedIn, Glassdoor, Indeed, Facebook, Twitter, YouTube and Instagram.

Position Summary: 
We have an exciting opportunity to join our team as a Associate Director - Network Security.
 
 
As a the Associate Director for Network Security, you will be responsible for overseeing the planning, implementation, and maintenance of NYULHs network security infrastructure. Your primary goal will be to ensure the confidentiality, integrity, and availability of the company's network resources, data, and systems. You will lead a team of network security professionals, collaborate with IT teams, and interface with stakeholders across various departments to identify security risks, develop strategies, and implement solutions to protect the NYULH from cyber threats.

Job Responsibilities:
<ul>
<li>Develop and execute a comprehensive network security strategy aligned with NYULHs overall security objectives and risk tolerance. Identify potential vulnerabilities and create plans to mitigate them.</li>
<li>Manage and mentor a team of network security specialists. Provide guidance, training, and support to ensure the team's effectiveness in handling security incidents, monitoring network traffic, and implementing security controls.</li>
<li>Design and implement robust network security architectures, including firewalls, intrusion detection/prevention systems, VPNs, and secure access controls. Ensure compliance with industry standards and best practices.</li>
<li>Establish and maintain incident response procedures to promptly detect, assess, and respond to security incidents. Lead investigations, coordinate with relevant teams, and implement remediation measures when necessary.</li>
<li>Conduct regular risk assessments of the network infrastructure and identify potential security weaknesses. Collaborate with other security and IT teams to prioritize and address the identified risks.</li>
<li>Promote a security-conscious culture within the organization by conducting training programs, workshops, and awareness campaigns to educate employees about network security best practices.</li>
<li>Evaluate and manage relationships with Palo Alto, Fortinet, F5 and other third-party security vendors, ensuring that outsourced security services meet the organization's requirements and compliance standards.</li>
<li>Monitor network security compliance with relevant regulations, policies, and frameworks. Stay up to date with evolving security threats and industry trends, recommending and implementing necessary changes to maintain a strong security posture.</li>
<li>Maintain accurate and detailed records of security incidents, responses, and resolutions. Prepare reports for management and stakeholders, providing insights into network security performance.</li>
<li>Collaborate with senior management to define and manage the network security budget, ensuring optimal utilization of resources and investment in security technologies.</li></ul> 


Minimum Qualifications: 
To qualify you must have a 7 or more years of experience and BA/BS degree

Preferred Qualifications: 
Prior supervisory experience is required. 
Vendor certifications for one or more of Palo Alto, F5, Gigamon

Qualified candidates must be able to effectively communicate with all levels of the organization. 
 
NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.

At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement. The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time-off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters. Join us and experience the extensive resources and services designed to enhance your overall quality of life for you and your family.
 
 
NYU Langone Health is an equal opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online.

View Know Your Rights: Workplace discrimination is illegal.

NYU Langone Health provides a salary range to comply with the New York state Law on Salary Transparency in Job Advertisements. The salary range for the role is $152,240.27 - $188,215.21 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits.

To view the Pay Transparency Notice, please click here</div>

Associate Director - Network Security

Search 10000+ Senior network security architect jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 senior network security architect jobs Near Me

Senior Network Security Architect

Senior Cloud Security Architect

Senior Presales Cybersecurity Solution Architect

Senior Network Security Engineer

Senior Network Security Engineer

Senior Network Security Engineer

Associate Director - Network Security