Network Architect

The Senior Network Architect is responsible for the strategy, design, and delivery of network security infrastructure within the private and public cloud data centers of City National Bank using modern approaches and automation practices. This individual must possess an in-depth knowledge of modern network security platforms applied towards the strategic business goals while implementing cutting edge network security architecture and design. This role is a subject matter expert and technical authority for the overall network security design and technical delivery. This individual will ensure delivery of future state modern network security architecture through modern practices leveraging Infrastructure as Code, Policy as Code, and Self-Service automation.

• Lead and participate in multi-disciplinary engineering teams solving complex network security challenges in creative and effective ways through development and analysis using modern design and architectural practices and principals.

• Define, analyze, and plan all aspects of the network security architecture using a system data driven approach.

• Deliver secure, robust, reusable, repeatable patterns that supports a DevSecOps model, promoting increasing maturity in our adoption of evolving network security models and capabilities.

• Subject matter expert to multi-disciplinary infrastructure and application teams migrating to new modern network security platforms providing joint assessment of existing application technology and taking a broad approach to identify solutions.

• Develop and mature NetDevOps skills and practices leveraging Agile and DevOps methodologies for the configuration and management of the network security platform.

• Enable teams to efficiently enable their workloads on the network security platform using self-service and automation while taking advantage of cloud native technologies and PaaS capabilities.

• Create and document reusable design patterns utilizing modern and next generation technology and practices necessary for efficient and scalable use of the network security platform.

• Develop and document architecture patterns and best practices to implement a zero-trust security approach. Create viable network security designs that align with the strategic company goals and objectives that meet rigorous security and regulatory requirements.

• Create proof-of-concept solutions using native cloud provider technologies and demonstrate capabilities to teams.

• Responsible and accountable for delivery of quality network security designs and associated documentation related to the bank's financial products, services, and processes.

• Liaison between external system integrators, engineering teams, application teams, as well as internal project and product managers.

• Partner with the Information Security and Enterprise Architecture teams to ensure patterns and best practices meet the standards within City National Bank.

• Keep abreast with market and third-party cloud provider services to design the best solution for the customer.

Must-Have*

• Bachelor's Degree in Computer Science or in a related technical field or equivalent experience
• Minimum 10 years working in an enterprise level environment designing and building server, storage, and network solutions in virtualized environment
• Minimum 6 years of increasing complexity and experience in infrastructure architecture or similar technical role
• Minimum 4 years of experience implementing private/public and/or hybrid cloud solutions
• Minimum 3 years hands on experience with cloud networking (i.e. VNET, Private Link, Peering, etc.), IAM, IaaS, PaaS, Storage, Container technology, etc.

Skills and Knowledge

• Expert understanding of network layers, protocols, and routing.
  
• Strong experience and understanding of zero trust security concepts
  Strong experience with network protocols, including TCP/IP, IPSec, IPV4/6.
  
• Experience with python, C#, C++, or other similar software development languages.
  
• Experience with modeling network configuration in JSON, YAML, and/or YANG.
  
• Strong expertise and proficiency in designing and implementing solutions that leverage modern next-generation practices.
  
• Strong experience leveraging cloud native or modern capabilities delivering network security requirements (Firewall, DNS, Proxy, etc).
  
• Strong Expertise and proficiency in network and security implementation using cloud native offerings to include application gateways, network security groups, azure firewall, and/or AWS equivalents.
  
• Confident understanding of CI/CD pipelines, Infrastructure as Code, Policy as Code methodologies, and their relevant tooling such as Help, Terraform, Ansible, Chef, etc.
  
• Familiar with the latest networking/computing trends and technologies.
  
• Ability to present designs and results effectively in briefings and technical reports.
  
• Experience and basic understanding of Agile, Agile release trains, and strong aptitude to work in an agile environment.
  
• Minimum 12 years of increasing complexity and experience in network security architecture or similar technical role
  
• Minimum 4 years of experience implementing private/public and/or hybrid network security solutions
  
• Recent experience successfully transitioning an organization into a modern network security architecture.