Network Security Architect Jobs
Network Security Architect jobs are open across defense contracting, financial services, healthcare, and technology, at every level from mid-career to principal and fellow, with specializations in zero-trust architecture, cloud security, and network segmentation. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 19+ Network Security Architect jobs
- 4392
- Johnston, Rhode Island
- Information Technology
- full-time
- Works from an office location
- 17
- USD $138,000.00/Yr.
- USD $198,000.00/Yr.
Job Description
Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world’s largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection.
Schedule & Location
- Employment type: Full-time, salaried position
- Location: Remote, within commutable distance of FM’s Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs.
- Relocation: Relocation assistance is not available for this position
Position Summary
Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs.
In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center.
This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent.
What You’ll Do
- Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access.
- Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review.
- Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats.
- Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable.
- Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why.
- Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings.
- Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums.
- Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly.
- Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading.
- Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback
Qualifications
- 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design.
- Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity.
- Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS.
- Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly.
- Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress.
- Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows.
- Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes.
- Experience designing zero trust segmentation and SASE/ZTNA architectures.
- Understanding of the current threat landscape and how it informs network security architecture.
- Familiarity with data protection and data loss prevention concepts, and with how network controls support them.
- Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required.
- Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams.
- Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate.
- Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams.
Education
Bachelor’s degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply.
The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM’s comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time.
FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
- 4392
- Johnston, Rhode Island
- Information Technology
- full-time
- Works from an office location
- 17
- USD $138,000.00/Yr.
- USD $198,000.00/Yr.
Job Description
Established nearly two centuries ago, FM is a leading mutual insurance company whose capital, scientific research capability and engineering expertise are solely dedicated to property risk management and the resilience of its policyholder-owners. These owners, who share the belief that the majority of property loss is preventable, represent many of the world’s largest organizations, including one of every four Fortune 500 companies. They work with FM to better understand the hazards that can impact their business continuity to make cost-effective risk management decisions, combining property loss prevention with insurance protection.
Schedule & Location
- Employment type: Full-time, salaried position
- Location: Remote, within commutable distance of FM’s Corporate Office in Johnston, Rhode Island. On-site presence at the Corporate Office is expected 1 to 2 days per week, depending on business needs.
- Relocation: Relocation assistance is not available for this position
Position Summary
Come join a newly formed team driving security architecture for a global Fortune 500 company. FM is building its Security Architecture function, and we're looking for a Senior Security Architect to be our subject matter expert for network security. Network security is your starting focus. As the function grows, your scope may expand into other security domains, based on your skills and the organization's needs.
In this role, you'll define how network security controls are designed, standardized and governed across a global network that supports dozens of locations in countries around the world. That includes today's offices, internet perimeters and private wide-area networks, and the cloud-first, software-delivered network we're moving toward, with Microsoft Azure at its center.
This is an individual contributor role for a forward-thinking architect with deep network security expertise and experience working in a modern cloud and DevOps environment. The ideal candidate connects the threat landscape to architecture decisions and sees the value of managing network and security configuration as code, but can also navigate the code itself or the management console to confirm that implemented configurations and architectures match design intent.
What You’ll Do
- Set the standard: Define control design intent, technical standards and evaluation criteria for network security across our global environment. This covers next-generation firewalls (NGFWs), network segmentation, secure ingress and egress, web application firewalls (WAFs), DNS and edge protection, intrusion detection and prevention (IDS/IPS), SASE, ZTNA, and remote and branch access.
- Build reusable patterns: Create reference architectures and patterns for on-premises, hybrid and Azure environments, including areas that don't have them today, so most work can move forward without case-by-case review.
- Drive modernization: Own the network security strategy and roadmap, including our move toward secure access service edge (SASE), zero trust network access (ZTNA) and identity- and application-aware segmentation. Sequence the work to align with business direction and stay ahead of evolving threats.
- Champion security as code: Promote infrastructure-as-code and configuration-as-code practices, along with CI/CD controls, so network and security changes are consistent, peer-reviewed, traceable and auditable.
- Apply a risk-based approach: Translate security policy and risk intent into clear technical requirements, working with engineering teams to ensure requirements are practical, implementable and appropriate for the environment. Be clear about where controls are required, where they can be tailored and why.
- Stay connected to implementation: Work closely with network security engineers to understand how designs are implemented in practice. Be comfortable reviewing configurations in firewall, SASE, WAF and cloud consoles and in code repositories, both to validate design intent and to identify opportunities to strengthen or evolve our architecture. Help define criteria for independent control validation and work with engineering teams to interpret and act on the findings.
- Guide decisions: Review and approve designs, patterns and exceptions against defined criteria, document architecture decisions, and represent security in architecture review forums.
- Collaborate across teams: Partner closely with enterprise architecture and with the network security, platform, and cloud engineers that operate security controls. Bring architectural perspective together with their hands-on expertise to develop solutions that are secure, practical and operable at scale. Stay close to implementation and work with engineering teams rather than operating platforms directly.
- Anticipate threats: Keep up with adversary techniques, attacks on network edge and remote access, and changes in platforms and the industry, and design for where the environment is heading.
- Communicate and mentor: Explain network security risk and requirements clearly to non-security audiences, and help develop other architects through coaching, design review and feedback
Qualifications
- 8 or more years of experience in IT or cybersecurity, with significant responsibility for network security architecture, engineering or design.
- Experience designing resilient, redundant global network architectures, including SD-WAN, MPLS and hybrid connectivity.
- Experience designing enterprise network security architectures, including NGFWs, segmentation, DMZs, secure ingress and egress, and IDS/IPS.
- Architecture-level experience with enterprise NGFW platforms, and enough hands-on depth to assess configurations directly.
- Strong Microsoft Azure network security experience, including virtual networks, network security groups, routing, private connectivity, and cloud ingress and egress.
- Strong networking fundamentals, including BGP, routing, IPsec, VLAN/VRF, load balancing and troubleshooting complex traffic flows.
- Experience with infrastructure as code, configuration as code, version control and CI/CD practices for network or security changes.
- Experience designing zero trust segmentation and SASE/ZTNA architectures.
- Understanding of the current threat landscape and how it informs network security architecture.
- Familiarity with data protection and data loss prevention concepts, and with how network controls support them.
- Familiarity with the risks of enterprise AI use. Experience with AI architectures or enterprise AI deployments is a plus but not required.
- Experience creating reference architectures, reusable control patterns, exception criteria and decision records that hold up across teams.
- Sound judgment in making and defending decisions when requirements conflict, and in knowing when to escalate.
- Clear communication with technical and business audiences, and the ability to build agreement across engineering, platform, risk and product teams.
Education
Bachelor’s degree in computer science, information systems, engineering, cybersecurity, or a related field. A comparable combination of education and relevant experience may be considered. Even if your background doesn't match every requirement, we encourage you to apply.
The hiring range for this position is $138,000 - $198,000 a year. The final salary offer will vary based on geographic location, individual education, skills, and experience. The position is eligible to participate in FM’s comprehensive Total Rewards program that includes an incentive plan, medical, dental and vision insurance, life and disability insurance, well-being programs, a 401(k) and pension plan, career development opportunities, tuition reimbursement, flexible work, and time off, including vacation and sick time.
FM is an Equal Opportunity Employer and is committed to attracting, developing, and retaining a diverse workforce.
Network Security Architect Jobs by Experience Level
See All 19 Network Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsNetwork Security Architect Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Cybersecurity
- Consulting & Professional Services
What Employers Look For
The qualifications that appear most often in network security architect jobs.
- Five or more years of enterprise network security design and architecture experience
- Hands-on experience with firewalls, IDS/IPS, SIEM platforms, and NAC systems
- CISSP, CCIE Security, or equivalent advanced security certification required
- Demonstrated knowledge of zero-trust network architecture principles and implementation
- Experience securing cloud environments across AWS, Azure, or Google Cloud Platform
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Network Security Architect Job Search
Tailor your resume to architecture scope
Hiring managers for network security architect roles want to see enterprise-scale design decisions, not just operational tasks. Reframe your bullet points around the architecture you owned, the threat models you built, and the business outcomes your designs produced.
List certifications in the right order
Put your most advanced certification first. CISSP and CCIE Security outrank CompTIA Security+ for architect roles. If you hold a cloud security credential like CCSP or AWS Security Specialty, list it immediately after, since most postings now specify hybrid on-prem and cloud environments.
Apply early to roles that fit
Migrate Mate lists network security architect openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter postings by compliance framework
Many network security architect postings require hands-on experience with NIST 800-53, FedRAMP, PCI-DSS, or HIPAA. Search for the specific framework your background covers and read the posting carefully to confirm scope before applying, since requirements vary significantly by industry.
Prepare a design walkthrough for interviews
Most network security architect interviews include a whiteboard or take-home design exercise. Practice walking through a segmentation design or zero-trust deployment out loud, explaining your threat assumptions and trade-offs, not just the final diagram.
Negotiate scope before discussing compensation
Before accepting any offer, clarify whether you own architecture decisions independently or report to a CISO who controls final calls. Titles vary widely in authority. Getting alignment on decision rights now prevents frustration once you are in the role.
Network Security Architect Jobs: Frequently Asked Questions
Which companies are hiring the most network security architects?
The most active employers for network security architects right now are FM, FCT, and NCR, and the most openings are in California, Florida, and Colorado, based on current listings on Migrate Mate as of November 2026. Defense contractors and large financial institutions tend to post the most volume at any given time.
How many network security architect jobs are remote?
About 33% of network security architect openings are fully remote or hybrid as of November 2026, though the share varies by sector. Cloud security and zero-trust architecture roles tend to offer the most remote flexibility, while positions tied to classified government networks or on-prem data centers typically require an on-site presence.
How do you become a network security architect?
Start by building several years of hands-on experience in network engineering or security operations, then move into design-focused roles where you own architecture decisions. Earn an advanced certification such as CISSP or CCIE Security to signal readiness for architect-level work. Develop fluency in threat modeling, secure design patterns, and at least one major cloud platform, since most organizations now operate hybrid environments.
Can you get a network security architect job with little experience?
Breaking in without prior architect experience is possible if you can demonstrate design thinking through adjacent work. Document any time you proposed or reviewed a network security design, contributed to a segmentation project, or wrote security requirements for infrastructure changes. Home lab projects that replicate enterprise architecture scenarios, combined with a relevant certification, help fill the gap when your job titles have been more operational than architectural.
What does the network security architect interview process look like?
Most processes run three to four rounds. An initial screening with a recruiter or HR contact is followed by a technical phone screen covering your design background and certifications. A panel interview with the security engineering team typically includes a whiteboard or take-home architecture exercise where you design a network segment, a zero-trust deployment, or a cloud security control set. A final round with the CISO or senior leadership focuses on communication, business alignment, and how you approach trade-offs.
Where can I find and apply to network security architect jobs?
You can find and apply to network security architect jobs on Migrate Mate, which lists current openings from across the United States. Search the roles that match your experience level, industry focus, and preferred work arrangement, then apply directly to each listing that fits your background.
See All 19 Network Security Architect Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs