Role : Senior Datacenter Network & Security Architect

Experience: 8+

We are looking for a senior-level Network and Security Architect to support a complex datacenter segmentation and security architecture project. This is primarily an architecture and advisory role rather than an operational network engineering position.

The architect will assess the existing datacenter network and security environment and develop a future-state segmentation architecture. The work includes reviewing network topology, routing, VLANs/VRFs, IP addressing, firewall boundaries and key application traffic flows.

The architect will define appropriate security zones and trust boundaries, determine how communication between environments should be controlled, and provide recommendations around firewalling, micro segmentation, access control, logging and monitoring.

The role also includes developing a practical migration approach from the current environment to the target architecture while maintaining availability of business-critical services.

Required Experience

We are looking for someone with strong hands-on architecture experience in multiple complex datacenter environments and a solid background in:

• Datacenter network architecture and segmentation
• Routing, switching, VLANs, VRFs and IP architecture
• Firewall architecture and security policy design
• East-west and north-south traffic control
• Zero Trust and least-privilege principles
• Micro segmentation concepts and technologies
• Load balancing, DNS/IPAM and network monitoring
• High-availability and business-critical environments
• Migration planning, dependency analysis and rollback design
• Security logging and SIEM integration
• Working with infrastructure, security, application and operations teams

Knowledge of Cisco technologies and enterprise firewall platforms is preferred.

Experience with recognized security frameworks such as ISO 27001/27002, CIS Controls and Zero Trust architecture is valuable.

The candidate must be able to operate at architecture level, communicate clearly with senior technical stakeholders and translate complex technical risks into practical design decisions.

Expected Deliverables

The engagement should result in:

• Current-state datacenter network and security assessment
• Target datacenter segmentation architecture
• Defined security zones and trust boundaries
• Documented communication and access-control principles
• Identification of critical application traffic flows and dependencies
• Recommendations for firewalling and micro segmentation
• Logging and monitoring requirements
• Migration strategy including phases, risks, dependencies and rollback principles
• Architecture and operational documentation suitable for handover to internal teams

The primary objective is to improve isolation between workloads, reduce opportunities for lateral movement, improve security visibility and create a datacenter architecture that remains manageable and scalable.