Job DescriptionRole: Network Security Solution Architect
Duration: 12 Months
Work Model: Hybrid (3 days/week in office)
Key Responsibilities
DMZ Architecture & Migration • Analyze current DMZ architecture, firewall rules, and security controls.
• Assist in planning and executing the migration of servers and applications into a new or redesigned DMZ.
• Identify and mitigate risks associated with exposing services to external networks.
• Validate secure configurations during migration, including network segmentation, access control, and routing.
Network Security & Firewall Management • Design and enforce network segmentation strategies between DMZ, internal, and external zones.
• Review and implement firewall policies (e.g., Palo Alto, Versa Networks).
• Configure and validate NAT, ACLs, VPNs, and load balancers.
• Ensure secure communication between web, application, and database tiers.
• Assess existing firewall rules and eliminate redundant or high-risk rules.
• Create least-privilege access rules for the new DMZ architecture.
• Perform firewall rule recertification and documentation.
Azure VWAN & Network Architecture • Lead end-to-end architecture design and governance for migration from Hub-and-Spoke to Azure VWAN, ensuring alignment with enterprise cloud and security standards.
• Define and implement application-centric migration strategies, ensuring complete application stacks, including DMZ and internal dependencies, are migrated together.
• Design and oversee transit firewall decommissioning to reduce routing complexity, latency, and operational overhead.
• Define and execute the roadmap to decommission the legacy Hub-and-Spoke architecture and transition fully to Azure VWAN.
• Drive network architecture design, including:
• Routing
• UDR optimization
• Traffic flows
• Micro-segmentation within Azure VWAN
Web Application Firewall (WAF) • Lead Web Application Firewall (WAF) compliance implementation in Azure for all internet-facing applications.
Migration Planning & Execution • Oversee firewall policy redesign and migration, ensuring secure connectivity between DMZ and internal environments.
• Perform application dependency analysis across DMZ and internal systems to minimize latency and ensure seamless functionality.
• Define migration patterns and playbooks, including:
• Re-IP strategies
• Domain migration
• Service accounts
• Cutover strategies
• Provide hands-on architectural support during migration execution, including troubleshooting, validation, and real-time decision-making.
Collaboration & Risk Management • Collaborate with Cloud, Network, Security, Infrastructure, and Application teams for coordinated delivery.
• Identify and mitigate risks related to:
• Shared databases
• Cross-network dependencies
• Performance constraints
Architecture Governance & Documentation • Establish and enforce architecture governance, standards, and reusable design patterns.
• Maintain detailed documentation of:
• Current and future state network diagrams
• Firewall rule sets
• Security controls implemented
• Migration runbooks and rollback plans
Stakeholder Management • Support migration activities across EST and MST time zones, including critical migration windows.
• Present architecture decisions and migration impacts to senior stakeholders, translating technical concepts into business insights.
RequirementsTop 3 Required Skills: 1. IBM Financial transaction 2. Payment flow 3. Support Modernization Detailed Job Description: • Design, develop, and maintain applications built on IBM Financial Transaction Manager (FTM) to support core payments processing. • Contribute to the development of payment flows supporting transaction processing. • Build and support integrations between FTM and upstream/downstream systems using enterprise integration patterns. • Participate in the design, development, testing, deployment, and production support. • Troubleshoot and resolve application and integration issues in a complex, regulated environment. • Collaborate with architecture, QA, and operations teams to ensure platform stability, scalability, and performance. • Support modernization initiatives and enhancements to existing payment hub capabilities. • Produce clear technical documentation and participate in code reviews and knowledge sharing.