Overview

Join to apply for the Network Security Architect role at NP Group.

Contract: Network Security Architect
Duration: 6 Months
Start Date: ASAP
Location: Remote with some travel to London
Rate: Negotiable
Reference: 19860

The primary objective of the Network & Security Architect is to lead Network and Security Architecture and Design and Implementation for our customer facing professional services delivery. They will work collaboratively supporting delivery teams and engineers in the deployment of Services and serving as an escalation point for delivery engineers. This will include meeting with customers for workshops, defining requirements and creating aligned network designs including security controls (firewalls), routing and switching / topology, and leading and supporting network deployment. This will include secure, external and site to site connectivity sized to meet the requirements gathered from the customer.

Responsibilities

• The Architect is accountable for creating the design and implementation documents for the project including all connectivity and its security. This is focused on external (internet) connectivity and site to site WAN links. It will also cover onramp, cross-connect and VPN connectivity. The role requires that the Architect is accountable for the design and delivery of the networks and the associated security controls and firewall separacy.
• The Network Architect will ensure that best practices and templates are followed and delivered to the customer.
• The Architect will partner with the Principal Architect to identify and resolve Risks and Issues upon identification.
• Actively participate and support delivery engineers throughout all phases of a project, including Project Launch Workshops, Kickoff calls, lessons learned, etc.
• Ensure standards and delivery methodologies are being followed, and appropriate internal and/or partner resources are available to meet the current and future demands of the project.
• Create Requirements, High-Level Design (HLD) and Low-Level Design (LLD) documentation.
• Create Multi Site, Hub and Remote Site designs with appropriate connectivity and traffic separation supporting multiple customers (Service Provider Designs) and different security requirements on the same network.
• Create designs for new corporate network connectivity and all associated common services (DHCP, DNS, NTP for example)
• Create and validate Bill of Materials to support the design and its requirements.
• Create detailed implementation and testing documentation including physical build and cabling instructions.
• Development of implementation and backout plans.
• Create change/cut window Method of Procedure (MOP) documentation.
• Perform advanced engineering build services supporting the engineering delivery team when necessary.
• Provide technical guidance, knowledge transfers to operational teams
• Responsible for creating documentation for Network and Security technologies.
• Perform SME and hands-on delivery engagements as needed.
• Participate in customer-facing escalations.
• Must be able to identify, manage, and resolve conflict.
• Must be a strong, creative problem solver.
• Responsible for the identification of additional business opportunities.
• Must have the ability to identify and address risk before problems occur.
• Must understand the technologies in play and how they help meet customer business goals.

Qualifications / Experience

• Proven track record of successfully managing and delivering complex IT projects on time and within budget, utilizing programmatic approaches, e.g., Agile or Waterfall.
• Demonstrated ability to design, develop, and implement scalable, reliable, secure and efficient technical solutions. Ideally this will include supporting AI networks.
• Capability size and design internet and WAN links
• Skilled in navigating uncertain and rapidly changing environments, with a proven ability to use data to identify core issues and make informed recommendations.
• Exceptional problem-solving skills, with a knack for breaking down complex situations into manageable components, facilitating clear decision-making processes and action plans.
• Strong communication abilities, especially when faced with incomplete information or shifting priorities.
• Minimum five years (5) of industry experience in IT infrastructure architecture development and technology consulting, advisory, or professional services.
• At least 5 years of experience as a Senior or Lead Architect or equivalent experience.
• Highly self-motivated and directed, with keen attention to detail.
• Able to effectively prioritize tasks in a high-pressure environment.
• Demonstrated leadership, team building, and management skills.
• Advanced client-facing skills, including analyzing and providing solutions to complex architecture or services problems, influencing, and negotiating with clients.
• A self-starter who exudes positive energy and can rally those around them to a common goal.
• Extensive knowledge of Routing and Switching, Firewall based Security, Campus and Datacenter Network Design, Implementation, and Migrations is required. Ideally, the Architect will have a deep understanding of the technical network and security considerations in large scale AI projects.
• Extensive technical knowledge of network and security protocols (IPSEC VPN, SSL VPN, AAA, NAT, QoS, etc.)
• Advanced knowledge and/or certifications in at least one of the following platforms is also beneficial: Arista, Aruba, Cisco, CheckPoint, F5, Fortinet, Juniper, Palo Alto, Zscaler.
• CISSP or Sec+ is a plus.
• Deep knowledge of TCP/IP communication and routing is required (VRRP, HSRP, VSRP, ISIS, OSPF, EIGRP, BGP).Highly skilled in WAN technologies and Datacentre Network and Backbone Network design
• Knowledge of datacentre integration to Building Management systems is advantageous.
• Extensive technical knowledge of TCP/IP, UDP and IP services (e.g DNS, DHCP, NTP), Load Balancing.
• A deep understanding of WAN technologies and inter site connectivity, and traffic segmentation / separation.
• Extensive knowledge in firewall technologies and next generation firewall solutions (Palo Alto NGFW) for securing connectivity externally, and between internal zones, such as secure separation between production, IT management and Building management systems (SCADA) for example.
• Experience and expertise in developing architect-level network and security topology solutions.
• Experience with IAM, 2-Factor Authentication, User Account Management (Active Directory (on-prem, Azure), Endpoint Management.
• Advanced knowledge and/or certifications in at least one of the following platforms is also beneficial: Arista, Aruba, Cisco, Extreme, Juniper, NVIDIA / Mellanox.
• Experience with monitoring platforms.
• Experience working in High Performance Compute and AI environments would be advantageous, specifically NVIDIA DGX platforms. This includes knowledge of infiniband if possible, but not essential.
• Some knowledge of Storage Systems would also be beneficial.
• Able to conduct research into networking issues and products as required.

Networking People (UK) is acting as an Employment Business in relation to this vacancy.

IsExpired