Network Cyber Security Architect

Network Cyber Security Architect

Rate: 450- 500 per day

IR35: Outside IR35

Location: Fully Remote

Type: Contract

We are looking for an experienced Network Cyber Security Architect to join a large-scale telecoms programme, providing security architecture and independent assurance across complex network environments.

The role will have a strong focus on Privileged Access Management (PAM) and securing administrative access to critical Network Management Systems. You will review existing and proposed solutions, identify security risks and architecture gaps, and ensure designs meet required security, regulatory and architecture standards.

Key Responsibilities

• Provide security architecture and assurance across PAM and network management environments
• Review network and security designs, identifying risks, gaps and dependencies
• Define security controls and privileged-access requirements
• Review and assure HLDs, LLDs, PoCs, test strategies and implementation plans
• Provide recommendations around network segmentation, least privilege and secure management access
• Support architecture governance, workshops and technical decision-making
• Document security risks, exceptions, recommendations and remediation requirements

Key Skills & Experience

• Strong Network Security Architecture background
• Excellent IP networking knowledge, including routing, MPLS, VPNs, VRFs and Provider Edge
• Strong PAM / Privileged Access Management experience
• Experience with AAA, TACACS+, MFA, RBAC and bastion hosts
• Strong understanding of network segmentation, ACLs, uRPF and least privilege
• Experience with Network Management Systems (NMS)
• Knowledge of logging, auditing, telemetry and configuration management
• Experience reviewing and assuring HLDs, LLDs, PoCs and security controls
• Telecoms or service-provider network experience would be highly desirable

This is a great opportunity for an experienced Network Security Architect with strong PAM, AAA and service-provider networking expertise to work on a complex network security programme.

#J-18808-Ljbffr