Network Security Architect (AWS Cloud)

Position: Network Security Architect
Location: Remote
Duration: Contract
Job ID: 178269

Job Overview:
We are seeking an experienced Network Security Architect to support a critical migration initiative moving key applications and workloads to the AWS public cloud. This role will work closely with application teams, the security architecture group, and the perimeter defense team to define and implement network security requirements that ensure secure and compliant cloud adoption.

Responsibilities:

• Collaborate with application and infrastructure teams to gather and analyze network security requirements, including connectivity, allowed ports, protocols, and data flows.
• Translate application requirements into detailed and actionable network security policies and firewall rules.
• Design and validate network security architecture in AWS, including effective use of Security Groups, Network ACLs, and integration with Palo Alto firewall policies.
• Work closely with the perimeter defense/security operations team to streamline firewall rule discovery, approval, and deployment processes.
• Document best practices and standards guiding cloud network security design, specifying when to use Palo Alto vs AWS native controls.
• Contribute to discovery and planning phases for new migrations, ensuring all network security dependencies are captured.
• Support troubleshooting and optimization of existing cloud network security configurations.

Qualifications:

• 5+ years of experience in network security architecture or engineering, preferably with a focus on cloud environments (AWS strongly preferred).
• Strong understanding of network security controls: firewalls (Palo Alto experience highly desired), Security Groups, VPN, and layered defense models.
• Proven ability to translate application connectivity needs into firewall rule sets and network security designs.
• Familiarity with AWS networking components (VPC, Subnets, Route Tables, TGWs).
• Experience working alongside application teams in a collaborative Agile or DevSecOps environment.
• Excellent communication skills, capable of documenting and presenting complex technical information clearly.
• Ability to work independently and drive results in a fast-paced, dynamic environment.

Preferred Qualifications:

• AWS certifications (e.g., AWS Security Specialty, Solutions Architect).
• Experience with enterprise firewall policy management and automation tools.
• Background in financial services or highly regulated environments.

About PTR Global: PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada. For more information visit ;br>
At PTR Global, we understand the importance of your privacy and security. We NEVER ASK job applicants to:

• Pay any fee to be considered for, submitted to, or selected for any opportunity.
• Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process.
• Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup.

Pay Range: $80- $85

The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work.

If you receive a suspicious message, email, or phone call claiming to be from PTR Global do not respond or click on any links. Instead, contact us directly at +1 . To report any concerns, please email us at

#LI-HY1