Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 14 days ago

Network Security Architect

Delan Associates, Inc451 open roles

Where
NYC, New York, United States, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowNetwork Security ArchitectDelan Associates, Inc · NYC, New York, United States, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Delan Associates, Inc's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.8%1 day
  2. 4.0%3 days
  3. 8.5%7 days
  4. 15.4%14 days
  5. 34.1%30 days
This job: posted 14 days ago

The posting

Position: Network Security Architect – Overall 10+yrs experience needed.

Location: NYC, NY (Hybrid- 3 days a week) – face to face is must. Look for candidate from drivable distance as f2f is must. Duration: 6 - 12 months

Industry- Banking & Financial client Phone Interview followed by an in-person round of interview.

Must have 13+ years of experience and must attend F2F interview.

Skills: IP routing, MPLS, BGP, SD-WAN, Wireless Network, Data Centre architecture, Palo Alto, Cisco NGFWs, SIEM, EDR, AWS, Azure, GCP, SABSA, TOGAF, COBIT, ITIL, DODAF, Automation

Ideal Candidate: Senior Network Security Architect + strong enterprise networking/security architecture + hands-on PQC knowledge (FIPS 203/204/205) + experience assessing PQC readiness and its impact on Firewalls, WAF, NAC, Proxy, VPN/PKI and perimeter security.

Role Overview We are looking for a Senior Network Security Architect who can design and secure large enterprise network environments across on-prem, data center, and multi-cloud platforms. The most important differentiator for this role is Post-Quantum Cryptography (PQC) expertise, specifically NIST FIPS 203, FIPS 204, and FIPS 205, and how PQC impacts network security technologies. A Network Security Architect is a senior-level IT professional responsible for planning, designing, testing, and overseeing the implementation of secure enterprise network configurations to protect an organization from cyber threats. Acting as the strategic blueprint designer, this role ensures that all local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and cloud integrations align with business objectives and stringent security standards. Subject Matter expert / domain specialist related to post-quantum cryptography (NIST FIPS 203, 204, 2052) will be required to cover Firewalls, Web Application Security, NAC, Proxy and Perimeter Mail areas within Network Security. • Strong familiarity with NIST Post-Quantum Cryptography standards (FIPS 203, 204, 205) and their applicability to network security infrastructure • Understanding of financial industry regulatory frameworks (e.g., FFIEC, DORA, SEC cybersecurity guidance) as they relate to cryptographic standards • Experience supporting PQC readiness assessments in regulated industries • Awareness of 'harvest now, decrypt later' threat vectors and their implications for financial data • Ability to incorporate industry-standard compliance frameworks into the RFP deliverables and final recommendations The Network Security Architect leads the creation of robust, layered defense infrastructures. They analyze existing security postures, identify structural vulnerabilities, perform gap analyses, and design end-to-end network security solutions. They collaborate closely with project managers, security engineers, and executive stakeholders to translate complex business demands into highly resilient, secure technical realities.

Core Responsibilities 1. Security Architecture & Strategy Design: Design and deliver comprehensive, secure network frameworks using trust domain segregation, Zero Trust Architecture (ZTA), and secure zoning principles. Develop technical solutions and integration strategies across LANs, WANs, SD-WAN, MPLS, data centers, and multi-cloud environments. Establish baseline configurations for network infrastructure, including Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Network Access Control (NAC). 2. Risk Assessment & Vulnerability Management: Conduct routine gap analyses and security risk assessments against recognized frameworks like NIST, SANS, and CIS. Evaluate proposed acquisitions and software interfaces to determine how they impact the organization's overarching network security posture. Plan and oversee regular vulnerability scanning, penetration testing, and ethical hacking exercises. 3. Access Control & Data Protection: Define and implement secure identity federation, Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Public Key Infrastructure (PKI) systems. Enforce Role-Based Access Control (RBAC) to limit network access strictly by corporate necessity and specific employee roles. Architect data-in-transit encryption paths (IPsec/SSL VPNs) and Data Loss Prevention (DLP) parameters to mitigate data leakage. 4. Incident Response & Business Continuity: Design disaster recovery plans, data backup strategies, and conduct routine breach-of-security simulation drills. Provide escalation support during critical network intrusions or unauthorized system access. Conduct comprehensive post-event analyses to determine exact root causes and update network models to mitigate future risks.

Required Technical Skills & Knowledge Network Technologies: Proficient in IP routing, MPLS, BGP, SD-WAN, Wireless networks, and advanced data center architectures. Security Hardware/Software: Extensive experience deploying Checkpoint, Palo Alto, or Cisco NGFWs, SIEM monitoring platforms, and Endpoint Detection and Response (EDR) solutions. Cloud Architecture: Hands-on experience mapping secure network perimeters inside AWS, Azure, or Google Cloud Platform (GCP) environments. Frameworks & Methodologies: Deep familiarity with SABSA, TOGAF, COBIT, ITIL, and DoDAF architecture frameworks. Automation & Scripting: Capability to write code in Python or PowerShell to automate network provisioning and logging configurations.

Experience & Education Requirements Education: Bachelor’s or Master's degree in Cybersecurity, Computer Science, Information Technology, or a closely related technical discipline. Experience: 8+ years of core IT networking experience alongside 3+ years specifically focused on advanced enterprise cybersecurity architecture. • IT Infra • Multi Cloud • Networking • Automation • Security • Agile • Complex problem-solving skills Certifications (Highly Preferred): • Certified Information Systems Security Professional (CISSP) or Information Systems Security Architecture Professional (CISSP-ISSAP). • Cisco Certified Internetwork Expert (CCIE) or Cisco Certified Design Professional (CCDP). • Certified Information Security Manager (CISM) or SABSA Chartered Security Architect.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Delan Associates, Inc's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Delan Associates, Inc's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Delan Associates, Inc's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.