Network Security Architect

Delan Associates Inc.

. Design and deliver secure network frameworks using trust domain segregation, Zero Trust Architecture, and secure zoning .

Posted 10/23/2026contractNew York City • New York • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing secure network frameworks and advanced enterprise cybersecurity architecture, with a strong focus on compliance frameworks and vulnerability assessments. Proficient in integrating multi-cloud environments and implementing security measures across various network infrastructures.

Highest-signal resume keywords

Advanced Enterprise Cybersecurity ArchitectureIP Routing, MPLS, BGP, SD-WANCheck Point, Palo Alto, Cisco NGFW DeploymentPython or PowerShell for Network AutomationCISSP/CISSP-ISSAP, CCIE/CCDP, CISM, SABSA Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network Framework DesignVulnerability ScanningPenetration TestingIdentity FederationRBAC EnforcementDisaster Recovery PlanningRisk AssessmentData Backup StrategiesPQC Readiness AssessmentCompliance Framework Integration

Soft Skills

Collaboration with StakeholdersCommunication Skills

Tools & Technologies

SIEM Monitoring PlatformsEDR SolutionsAWSAzureGoogle Cloud Platform

Certifications & Qualifications

CISSPCISSP-ISSAPCCIECCDPCISMSABSA Chartered Security Architect

Industry Keywords

Zero Trust ArchitectureNGFWIDS/IPSNIST PQC StandardsFFIEC GuidanceDORA GuidanceSEC Cybersecurity GuidanceSABSATOGAFITIL

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Design and deliver secure network frameworks using trust domain segregation, Zero Trust Architecture, and secure zoning
Develop integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments
Establish baseline configurations for NGFW, IDS/IPS, and NAC infrastructure
Analyze security postures, identify vulnerabilities, and perform gap analyses and risk assessments
Evaluate acquisitions and software interfaces for impacts on network security
Plan and oversee vulnerability scanning, penetration testing, and ethical hacking exercises
Define secure identity federation, MFA, SSO, and PKI systems
Enforce RBAC and architect IPsec/SSL VPN encryption paths and DLP parameters
Design disaster recovery plans and data backup strategies
Conduct breach simulation drills and provide escalation support during critical intrusions
Perform post-event root-cause analyses and update network models
Assess PQC readiness and its impact on firewalls, WAF, NAC, proxy, VPN/PKI, and perimeter security
Collaborate with project managers, security engineers, and executive stakeholders
Produce RFP deliverables and final recommendations incorporating compliance frameworks

Requirements

What you’ll need

Overall 10+ years of experience; posting also states 13+ years of experience
8+ years of core IT networking experience
3+ years focused on advanced enterprise cybersecurity architecture
Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a closely related technical discipline
Proficiency in IP routing, MPLS, BGP, SD-WAN, wireless networks, and advanced data center architectures
Extensive experience deploying Check Point, Palo Alto, or Cisco NGFWs
Experience with SIEM monitoring platforms and EDR solutions
Hands-on experience with AWS, Azure, or Google Cloud Platform environments
Deep familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF frameworks
Ability to write Python or PowerShell for network provisioning and logging automation
Strong familiarity with NIST PQC standards FIPS 203, 204, and 205
Understanding of FFIEC, DORA, and SEC cybersecurity guidance
Experience supporting PQC readiness assessments in regulated industries
Awareness of “harvest now, decrypt later” threats
Ability to incorporate compliance frameworks into RFP deliverables and final recommendations
Hands-on PQC knowledge and experience assessing impacts on firewalls, WAF, NAC, proxy, VPN/PKI, and perimeter security
Must attend a face-to-face interview; candidate should be within drivable distance of NYC
CISSP/CISSP-ISSAP, CCIE/CCDP, CISM, or SABSA Chartered Security Architect certifications highly preferred

Benefits

Comp & perks

Contract duration of 6–12 months
Hybrid work arrangement
In-person interview opportunity