Security Architect – Infrastructure & Network Security
Comgent
contract
Posted on:
Location Type: Hybrid
Location: London • United Kingdom
Visit company websiteExplore more
About the role
- Establish security architecture governance at the infrastructure level
- Define and document infrastructure security architecture standards and principles aligned to industry frameworks
- Review and provide security sign-off on network and infrastructure designs as part of the transformation programme
- Identify security gaps across the current environment (network, server, voice, hosting) and produce a prioritised remediation roadmap
- Work with the CISO function to establish technical security policies where none currently exist
- Evaluate and rationalise the existing security tooling estate (firewalls, network security tools, monitoring)
- Provide guidance on firewall architecture (Palo Alto migration from ASA, segmentation strategy)
- Advise on secure cloud architecture and landing zone design for hybrid/multi-cloud environments
- Support procurement and vendor selection with security assessment criteria
Requirements
- 8-10 years of experience in security architecture and infrastructure
- Strong network security architecture skills: firewall design, micro-segmentation, DMZ architecture, east-west traffic control
- Palo Alto Networks (PA-40 series): policy design, migration from legacy ASA
- Understanding of regulatory requirements applicable to financial services (FCA, PRA, JFSA reporting obligations)
- Knowledge of security frameworks: NIST, ISO 27001, CIS Controls
- Cloud security: Azure, AWS security architecture, secure landing zones
- Vulnerability management, threat modelling, and security risk assessment
- Experience defining and implementing security policies for hybrid environments
- Advantageous CISSP, CISM, or equivalent professional qualification
- Experience with network automation and security orchestration
- Familiarity with SIEM, NDR, or network observability tooling
- Understanding of trading floor and financial services technology risk.
Benefits
- We are committed to building an inclusive workplace and encourage applications from women and other under-represented groups in tech. All qualified candidates are welcome.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
security architecturenetwork security architecturefirewall designmicro-segmentationDMZ architecturePalo Alto Networkscloud securityvulnerability managementthreat modellingsecurity risk assessment
Certifications
CISSPCISM