Job Description

Network Security Architect Lead

Role: Network Security Architect Lead
Experience: 10–12 years of relevant experience
Location: Mexico (MX)

The Network Security Architect Lead is responsible for architecting, designing, and leading the implementation and operations of secure, scalable, and highly available enterprise network infrastructures. This role provides technical leadership across complex network and security environments while ensuring alignment with business, security, and compliance requirements.

Primary Technical Skills

• Advanced expertise in enterprise network engineering, design, and operations

• Strong hands-on experience with routers, switches, spine–leaf architectures, and load balancers

• In-depth knowledge of network security technologies, including:

  • Firewalls
  • VPNs
  • IDS/IPS
  • Web Application Firewalls (WAF)

• Proven experience with Software-Defined Networking (SDN) solutions such as:

  • Cisco ACI
  • VMware NSX‑V / NSX‑T

• Strong expertise in Cisco Routing & Switching, including:

  • Cisco Nexus
  • Cisco UCS environments

• Hands-on experience with Palo Alto Networks firewalls and enterprise security solutions

• Deep knowledge of F5 LTM / GTM for traffic management and high availability

• Solid understanding of network segmentation, isolation models, and encryption architectures

• Experience with Cisco ISE for network access control and security policy enforcement

• Strong knowledge of QoS, including prioritization of voice and video traffic

• Experience with network monitoring, system health checks, and troubleshooting across hardware and software layers

• Exposure to network automation and configuration standardization

• Excellent documentation skills, including:

  • High-Level Design (HLD)
  • Low-Level Design (LLD)
  • Solution specifications
  • Standards and SOPs

Key Responsibilities

• Lead the design, implementation, and operational support of enterprise network and network security solutions
• Architect secure, scalable, and highly available network infrastructures aligned with business needs
• Provide technical leadership by mentoring junior engineers and leading complex project implementations
• Design and maintain software-defined networking environments using Cisco ACI and related technologies
• Implement and manage network security controls, including firewalls, VPNs, IDS/IPS, and WAF solutions
• Drive standardization and automation of network configuration, deployment, and operational processes
• Ensure effective network segmentation, isolation, and encryption strategies to meet security and compliance requirements
• Perform advanced troubleshooting and act as an escalation point for critical network and security incidents
• Collaborate with cross-functional teams to deliver secure network solutions and resolve complex technical issues
• Develop and maintain technical documentation, solution designs, guidelines, and operational procedures
• Support planned maintenance, upgrades, and implementations, including nights and weekends as required
• Proactively monitor network performance and reliability, identifying risks and improvement opportunities

Secondary / Nice-to-Have Skills

• Experience with Cisco WAAS and WCCP
• Scripting skills using Python, PowerShell, or similar for automation
• Exposure to hybrid or virtualized network environments
• Familiarity with DevSecOps practices related to network automation
• Relevant certifications preferred:
  • CCNP
  • CCIE
  • Palo Alto
  • F5