Network Security Architect

Job Posting: Network Security Architect

Position Overview

We are seeking a highly skilled Network Security Architect to join our dynamic team. This role involves designing, implementing, and managing advanced security solutions in a fast-paced environment. The ideal candidate will have extensive hands-on experience with leading firewall and security technologies, along with a proven track record in architecting secure network infrastructures.

Key Details

• Location
  : BGC Taguig or Makati
• Shift
  : Night Shift/Shifting – Flexibility is required
• Work Setup
  : RTWO/Hybrid
• Experience Level
  : 10+ years
• Salary Range
  : PHP 130,000 – 200,000 (depending on experience)

Required Skills & Experience

• 8+ years in network security, including at least 3 years in a security architect role
• Hands-on expertise with Checkpoint Firewalls, Palo Alto Firewalls, Cisco ISE, Cloudflare WAF, Illumio Core, Proofpoint email security, Tufin SecureChange+, and Zscaler ZIA/ZPA/ZDX
• Deep knowledge of security fundamentals, including VPNs, IPS/IDS, SSL decryption, and network protocols (TCP/IP, BGP, OSPF)
• Proven ability to design, implement, and manage cybersecurity operations, incident response, and vulnerability management

Technical Expertise

• Advanced proficiency in Palo Alto firewall technologies (PA Series, Panorama, GlobalProtect) and Checkpoint firewalls
• Strong command of security policies, rule sets, NAT, App-ID, User-ID, Content-ID, and URL filtering
• In-depth experience with security policy development, firewall rule management, network segmentation, and access controls
• Expertise in cloud security best practices and integrating multi-vendor solutions in hybrid and cloud setups
• Familiarity with security automation and scripting to optimise processes

Secondary Skills

• Excellent communication and collaboration abilities
• Strong analytical and problem-solving skills
• Capability to thrive under pressure in a high-velocity setting
• Solid organisational skills with keen attention to detail
• Knowledge of compliance standards such as PCI-DSS, ISO 27001, HIPAA, GDPR, and NIST
• Availability for on-call incident response and security alerts as needed

Must-Have Qualifications

• Hands-on experience with the specified tools and technologies
• B.E./B.Tech/MCA degree with 6-10 years of relevant experience
• Palo Alto Networks Certified Network Security Engineer (PCNSE) is highly preferred
• Relevant certifications such as CISSP, CISM, CCIE Security, PCNSE, or equivalent
• Vendor-specific certifications from Checkpoint, Zscaler, Cisco, and Cloudflare are highly desirable

Good-to-Have

• Strong communication skills

Additional Requirements

• Must be willing to work in Taguig or Makati
• Preference for candidates with a stable employment history (no frequent short-term roles under 1 year)

Key Responsibilities

1. Configure, manage, and troubleshoot Palo Alto firewalls and related security solutions across data centres, cloud, and hybrid environments. Develop, implement, and refine security policies to ensure consistent enforcement.
2. Lead investigations into complex firewall issues and performance challenges, leveraging deep technical expertise for resolution. Apply a comprehensive understanding of VPNs, IPS/IDS, SSL decryption, and protocols like TCP/IP, BGP, and OSPF.
3. Partner with network and security teams to align firewall configurations with broader network designs and security strategies. Handle firmware upgrades, patching, and capacity planning for firewalls. Collaborate with cross-functional groups, including network engineers, cloud architects, and SOC teams, for seamless integrations.
4. Demonstrate self-motivation, quick learning, and adaptability in a 24/7 operational environment. Participate in on-call rotations, manage critical incidents outside business hours, and apply ITIL principles for effective service management.

If you are a proactive security professional ready to drive robust network defences, apply now

Please share this job with your network. Thank you