This is a full-time remote position for a Network Security Architect specializing in Cisco Secure Workload and zero trust data center security. The role involves designing, deploying, and troubleshooting advanced security architectures, with availability required for weekend and after-hours maintenance windows on Eastern time.
Responsibilities
Design, operate, and troubleshoot zero trust data center security using Cisco Secure Workload (CSW) and classic security technologies including Microsegmentation, Next Generation Firewalls, Network Access Control, and layer 3-7 security tools.
Perform application dependency mapping using CSW to inform cutover planning, policy design, and risk assessment.
Conduct readiness checks ahead of cutovers and policy enforcement windows, validating configurations, dependencies, and rollback plans before go-live.
Lead or support live execution of zero trust policy changes and network cutovers during weekend and after-hours maintenance windows.
Diagnose and troubleshoot issues in real time during cutover events, executing rollback procedures when required to protect service availability.
Perform post-change validation to confirm security policy enforcement and network functionality meet expected outcomes.
Document readiness assessments, execution results, and post-event findings.
Communicate technical status, risk assessment, and recommendations to non-technical business stakeholders under time pressure.
Show the full description
Record time spent on project tasks accurately and promptly in accordance with time-tracking requirements.
Qualifications
Required
Valid CCNP, CCIE, or equivalent certification (active status required).
3+ years of hands-on experience designing, operating, and troubleshooting zero trust data center security with classic tools and technologies such as Microsegmentation, Next Generation Firewalls, Network Access Control, and other layer 3-7 security technologies.
In-depth knowledge of classic data center networking protocols and principles.
Understanding of and ability to articulate Cisco ACI Zero Trust capabilities.
Confidence with ACI, including structured, disciplined configuration, deployment, and resolution.
Ability to work Wed–Sun or Thurs–Mon, including weekends and after-hours on Eastern time.
Ability to pass a Tier II Credit Check Enhanced background investigation, including drug screening.
Self-driven learner with ability to discuss emerging technologies and trends in network security.
Customer-facing consultative personality with leadership capability; able to discuss technical status and risk to non-technical business stakeholders with calm, professional interaction under time pressure.
Fluent English communication skills, written and verbal.
Preferred
3+ years of hands-on experience designing, operating, and troubleshooting data center security using Cisco Secure Workload (CSW).
Hands-on experience with Cisco Secure Workload (CSW).
Automation experience including scripting, orchestration, or network automation tooling.
