Technology

Network Security Architect : NYC,NY : Long-Term Contract

HAN IT Staffing Inc.New York, NY🇺🇸United StatesPosted Sep 28, 2026

Quick Overview

Seniority

Mid Senior

Work mode

Hybrid

Location

New York, NY, United States

Posted

Yesterday

AWSEncryptionMFASSOAzureGoogle CloudPKIPenetration TestingPowerShellPythonZero Trust

Job Description

Hi,

I'd like you to take a look at a great new position we now have available! Your opinion would be valued with regards to this opening. I really appreciate sending an updated resume & the best number with the best time to reach you

Role: Network Security Architect

Locations: NYC,NY
Duration: Long-Term Contract

Job Description

Design and deliver comprehensive, secure network frameworks using trust domain segregation, Zero Trust Architecture (ZTA), and secure zoning principles.
Develop technical solutions and integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments.
Establish baseline configurations for network infrastructure, including Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Network Access Control (NAC).
Risk Assessment & Vulnerability Management Conduct routine gap analyses and security risk assessments against recognized frameworks like NIST, SANS, and CIS.
Evaluate proposed acquisitions and software interfaces to determine how they impact the organization's overarching network security posture.
Plan and oversee regular vulnerability scanning, penetration testing, and ethical hacking exercises.
Access Control & Data Protection Define and implement secure identity federation, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Public Key Infrastructure (PKI) systems.
Enforce Role-Based Access Control (RBAC) to limit network access strictly by corporate necessity and specific employee roles.
Architect data-in-transit encryption paths (IPsec/SSL VPNs) and Data Loss Prevention (DLP) parameters to mitigate data leakage.

Required Technical Skills & Knowledge

Proficient in IP routing, MPLS, BGP, SD-WAN, Wireless networks, and advanced data center architectures.
Security Hardware/Software: Extensive experience deploying Checkpoint, Palo Alto, or Cisco NGFWs, SIEM monitoring platforms, and Endpoint Detection and Response (EDR) solutions.
Cloud Architecture: Hands-on experience mapping secure network perimeters inside AWS, Azure, or Google Cloud Platform (Google Cloud Platform) environments.
Frameworks & Methodologies: Deep familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF architecture frameworks.
Automation & Scripting: Capability to write code in Python or PowerShell to automate network provisioning and logging configurations..

Certifications (Highly Preferred):

Certified Information Systems Security Professional (CISSP) or Information Systems Security Architecture
Professional (CISSP-ISSAP).
Cisco Certified Internetwork Expert (CCIE) or Cisco Certified Design Professional (CCDP).
Certified Information Security Manager (CISM) or SABSA Chartered Security Architect

Thanks & Regards

HAN IT
STAFFING