Network Security Architect

Overview Job Posting: Network Security Architect We are seeking a highly skilled Network Security Architect to join our dynamic team. This role involves designing, implementing, and managing advanced security solutions in a fast-paced environment. The ideal candidate will have extensive hands-on experience with leading firewall and security technologies, along with a proven track record in architecting secure network infrastructures. Key Details Location: BGC Taguig or Makati Shift: Night Shift/Shifting – Flexibility is required Work Setup: RTWO/Hybrid Experience Level: 10+ years Salary Range: PHP 130,000 – 200,000 (depending on experience) Required Skills & Experience 8+ years in network security, including at least 3 years in a security architect role Hands-on expertise with Checkpoint Firewalls, Palo Alto Firewalls, Cisco ISE, Cloudflare WAF, Illumio Core, Proofpoint email security, Tufin SecureChange+, and Zscaler ZIA/ZPA/ZDX Deep knowledge of security fundamentals, including VPNs, IPS/IDS, SSL decryption, and network protocols (TCP/IP, BGP, OSPF) Proven ability to design, implement, and manage cybersecurity operations, incident response, and vulnerability management Technical Expertise Advanced proficiency in Palo Alto firewall technologies (PA Series, Panorama, GlobalProtect) and Checkpoint firewalls Strong command of security policies, rule sets, NAT, App-ID, User-ID, Content-ID, and URL filtering In-depth experience with security policy development, firewall rule management, network segmentation, and access controls Expertise in cloud security best practices and integrating multi-vendor solutions in hybrid and cloud setups Familiarity with security automation and scripting to optimise processes Secondary Skills Excellent communication and collaboration abilities Strong analytical and problem-solving skills Capability to thrive under pressure in a high-velocity setting Solid organisational skills with keen attention to detail Knowledge of compliance standards such as PCI-DSS, ISO 27001, HIPAA, GDPR, and NIST Availability for on-call incident response and security alerts as needed Must-Have Qualifications Hands-on experience with the specified tools and technologies B.E./B.Tech/MCA degree with 6-10 years of relevant experience Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred Relevant certifications such as CISSP, CISM, CCIE Security, PCNSE, or equivalent Vendor-specific certifications from Checkpoint, Zscaler, Cisco, and Cloudflare are highly desirable Good-to-Have Strong communication skills Additional Requirements Must be willing to work in Taguig or Makati Preference for candidates with a stable employment history (no frequent short-term roles under 1 year) Key Responsibilities Configure, manage, and troubleshoot Palo Alto firewalls and related security solutions across data centres, cloud, and hybrid environments. Develop, implement, and refine security policies to ensure consistent enforcement. Lead investigations into complex firewall issues and performance challenges, leveraging deep technical expertise for resolution. Apply a comprehensive understanding of VPNs, IPS/IDS, SSL decryption, and protocols like TCP/IP, BGP, and OSPF. Partner with network and security teams to align firewall configurations with broader network designs and security strategies. Handle firmware upgrades, patching, and capacity planning for firewalls. Collaborate with cross-functional groups, including network engineers, cloud architects, and SOC teams, for seamless integrations. Demonstrate self-motivation, quick learning, and adaptability in a 24/7 operational environment. Participate in on-call rotations, manage critical incidents outside business hours, and apply ITIL principles for effective service management. If you are a proactive security professional ready to drive robust network defences, apply now Please share this job with your network. Thank you Seniority level Mid-Senior level Employment type Full-time Job function Information Technology Industries Technology, Information and Internet #J-18808-Ljbffr