Why This Role Stands Out
As a Network Security Architect at Unicorn Technologies LLC, you'll leverage your expertise in SASE, Zero Trust, and leading security platforms to design and implement cutting-edge enterprise security solutions, offering significant opportunities for professional growth and impact. This hybrid role is perfect for a driven individual with deep hands-on experience in large-scale network security environments who thrives on complex problem-solving and collaborative innovation. Apply today to join a respected company and advance your career in a dynamic field.
Quick Overview
Seniority
Mid Senior
Work mode
Hybrid
Location
Portland, OR, United States
Posted
21 hours ago
OWASPWAFZero TrustLoad Balancing
Job Description
Job Title: Network Security Architect
Location: Portland, OR
Location: Portland, OR
Position Overview
We are seeking an experienced Network Security Architect with strong hands-on expertise in enterprise network security, SASE, Zero Trust, firewalls, secure web gateways, data loss prevention, and application security.
The ideal candidate will have extensive experience designing, implementing, migrating, and troubleshooting large-scale enterprise security environments, with deep expertise in Juniper Networks, Palo Alto Networks, Barracuda, Zscaler, Cisco ISE, and Broadcom/Symantec DLP.
Key Responsibilities
- Design, implement, and maintain secure enterprise network and security architectures.
- Provide hands-on administration, troubleshooting, and optimization of network security technologies.
- Design and implement SASE and Zero Trust Security architectures aligned with enterprise security requirements.
- Configure, manage, and troubleshoot firewalls, VPNs, security policies, routing, switching, and network access controls.
- Lead firewall migrations, security technology implementations, and large-scale enterprise deployments.
- Develop and maintain centralized security management and monitoring solutions.
- Troubleshoot complex production issues across network, firewall, SASE, ZTNA, DLP, and web security environments.
- Collaborate with network, infrastructure, application, cloud, and security teams to implement secure and scalable solutions.
- Develop and tune security policies, threat-prevention controls, DLP policies, and web security policies.
- Support security incident investigation, remediation, and policy optimization.
Required Technical Qualifications
1. SASE, Zscaler & Zero Trust – 6+ Years
- Strong hands-on experience with SASE, Zscaler, ZIA, ZPA/ZTNA, Secure Web Gateway, and cloud security policies.
- Experience with end-to-end Zscaler deployments, including:
- Tenant setup and administration
- Security policy configuration
- SSL inspection
- Authentication and identity integration
- Traffic forwarding using GRE, IPSec, and PAC
- Experience with user migration and application onboarding.
- Strong production troubleshooting experience in Zscaler environments.
- Strong understanding of SASE and Zero Trust security architecture principles.
2. Juniper Networks – 10+ Years
- 10+ years of experience with Juniper Networks technologies.
- Strong hands-on experience with:
- Juniper SRX Firewalls
- VPNs
- NAT
- Security policies
- Junos OS administration
- Strong knowledge of enterprise routing and switching protocols, including:
- BGP
- OSPF
- VLANs
- Experience with network security implementation, troubleshooting, and optimization.
- Experience with Juniper Security Director and Junos Space for centralized firewall and network management.
3. Palo Alto Networks
- Hands-on experience with Palo Alto Networks NGFW and Panorama.
- Strong experience with centralized firewall administration and policy management.
- Experience with:
- App-ID
- Threat Prevention
- WildFire
- IPS/IDS
- GlobalProtect VPN
- Advanced threat-prevention capabilities
- Hands-on experience with Panorama and Strata Cloud Manager.
- Experience supporting firewall migrations and large-scale enterprise deployments.
4. Barracuda Networks – 6+ Years
- 6+ years of experience with Barracuda Networks security solutions.
- Strong hands-on experience configuring and managing:
- Barracuda WAF
- Reverse Proxy
- Load Balancing
- Web Security
- Experience with SSL offloading, application traffic management, and web traffic filtering.
- Strong understanding of OWASP Top 10 vulnerabilities and web application security best practices.
5. Broadcom / Symantec DLP – 6+ Years
- 6+ years of experience with Broadcom/Symantec Data Loss Prevention (DLP) solutions.
- Hands-on experience with:
- Endpoint DLP
- Network DLP
- Data Classification
- DLP Policy Management
- Incident Management
- Experience with DLP policy tuning and sensitive-data protection.
- Knowledge of data leakage prevention controls across:
- Email
- Web
- USB/removable media
- Endpoints
- Network channels
6. Cisco ISE
- Strong hands-on experience with Cisco Identity Services Engine (ISE).
- Experience configuring, administering, troubleshooting, and optimizing Cisco ISE in enterprise environments.
- Strong understanding of network access control, authentication, authorization, and security policy enforcement.
Core Competencies
- The successful candidate should demonstrate strong practical experience in:
- Enterprise Network Security Architecture
- SASE & Zero Trust Architecture
- Zscaler ZIA / ZPA / ZTNA
- Juniper SRX & Junos OS
- Palo Alto NGFW & Panorama
- Barracuda WAF & Reverse Proxy
- Broadcom/Symantec DLP
- Cisco ISE
- Firewall Migration & Enterprise Deployments
- VPN, NAT & Security Policies
- BGP, OSPF & VLANs
- SSL Inspection & SSL Offloading
- IPS/IDS & Threat Prevention
- GlobalProtect
- Secure Web Gateway
- Data Classification & DLP Incident Management
- OWASP Top 10
- Production Troubleshooting
Similar jobs
- PI
Network Security Engineer Locals to Nashville, TN W2 role
NewParadigm Infotech
Nashville, TN🇺🇸On-site21 hours agoEncryptionTCP/IPTechnology - SS
Senior Product Security Engineer
NewSunrise Systems, Inc.
Waukesha, WI🇺🇸Hybrid21 hours agoEmbedded SystemsRoboticsIoT+1Technology - SR
Security Engineer Pentesting
Strategic Resources International
San Jose, CA🇺🇸Hybrid6 days agoAWSMachine LearningOWASP+10Technology - LM
Cyber Systems Security Engineering Sr - E3 with Security Clearance
NewLockheed Martin
Marietta, GA🇺🇸Hybrid21 hours agoConfluenceJiraTechnology - LE
SteelCloud Security Engineer with Security Clearance
NewLeidos
Suitland, MD🇺🇸$107.9k - $195.1k/yrHybrid21 hours agoZero TrustTechnology - NG
Sentinel - Surety and Security Capability Lead Systems Engineer with Security Clearance
NewNorthrop Grumman
Manhattan Beach, CA🇺🇸$129.3k - $193.9k/yrHybrid21 hours agoHTTPTechnology