Senior Network Security Architect

Senior Network Security Architect DXC Technology Role Overview DXC Technology is seeking a Senior Network Security Architect to own the network security architecture for a major greenfield campus transformation programme. Working under the central design authority, you will design security across multiple physically separated networks, covering perimeter and data centre protection, segmentation, Zero Trust access, secure connectivity and operational technology (OT) environments. You will translate complex security requirements into practical architecture, govern implementation quality and support the transition to managed operations. Key Responsibilities Network Security Architecture & Governance • Own the layered, multi-vendor firewall architecture across perimeter and data centre boundaries. • Define network segmentation, micro-segmentation and Zero Trust designs across physically separated networks. • Establish security reference designs, technical standards and firewall policy governance. • Collaborate with network, infrastructure and cybersecurity architects to resolve design dependencies. • Evaluate technology options and assure security, performance, availability and resilience. Secure Connectivity & Network Access • Design site-to-site and remote-access VPN solutions and SD-WAN security integration. • Define network access control using 802.1X, device profiling, posture assessment and guest/BYOD onboarding. • Design secure out-of-band management, including dedicated management VRFs, bastion access, MFA and session recording. • Incorporate secure time synchronisation and controlled administrative access. Application & Web Protection • Design web application firewall, load-balancing and SSL inspection capabilities. • Define inline secure web gateway controls and layered DDoS mitigation. • Establish IDS/IPS, threat prevention and sandboxing requirements. • Ensure application protection integrates with the wider network security architecture. OT & Air-Gapped Security • Design OT security aligned with IEC 62443 principles. • Define zone and conduit segmentation and controls for air-gapped environments. • Incorporate unidirectional gateways and data diodes where required. • Coordinate secure connectivity and information-flow requirements with relevant architecture teams. Security Operations Integration • Define vulnerability and patch remediation approaches for network and security devices. • Integrate network security logs and events with SIEM, NDR and SOC platforms. • Establish centralised firewall management, monitoring and rule-governance requirements. • Support operational readiness and handover to NOC and security operations teams for 24/7 support. Technical Leadership & Delivery Assurance • Guide security engineers and review detailed designs and implementation deliverables. • Govern build quality against approved architecture and security standards. • Resolve complex technical issues across a multi-vendor delivery environment. • Communicate architecture decisions, risks and dependencies clearly to programme stakeholders. Required Qualifications & Experience • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent professional experience. • Typically 7+ years of relevant industry experience, including at least 3 years in a network security architecture or technical leadership role. • Strong hands-on architecture knowledge across: • Palo Alto Networks NGFW and Panorama, including SSL decryption, URL filtering, threat prevention and WildFire. • Fortinet FortiGate, FortiManager and FortiAnalyzer. • F5 BIG-IP Advanced WAF and LTM, including application delivery and DDoS protection. • Cisco ISE, including 802.1X, posture assessment and device profiling. • Cisco Secure Workload and Secure Network Analytics. • Experience designing segmentation, micro-segmentation, Zero Trust and secure access controls. • Knowledge of OT security, IEC 62443, air-gapped networks and data diode architectures. • Strong understanding of VPN/IPSec, SD-WAN security, NAT, routing and Layer 2–7 troubleshooting. • Experience integrating security devices with SIEM, syslog/CEF and NDR platforms. • Knowledge of secure-by-design practices and vulnerability management. • Palo Alto PCNSE and/or Fortinet NSE 7 or above certification, or a relevant current equivalent. • ITIL 4 Foundation certification. • Strong problem-solving, delivery coordination and stakeholder communication skills. • Professional proficiency in English. Preferred Qualifications & Experience • Experience designing security for large campus, government, defence or critical infrastructure environments. • Experience governing multi-vendor security implementations from architecture through operational handover. • CCNP Security, CCIE Security, CISSP or CISM certification. • Advanced degree in a relevant discipline. • Arabic language proficiency. What We Look For We are looking for an architect who combines deep network security expertise with clear design ownership. You should be confident assessing complex requirements, making defensible architecture decisions and guiding engineering teams through implementation. You will bring structured problem-solving, credible stakeholder engagement and effective collaboration across network, infrastructure and cybersecurity teams. Show more Show less

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent professional experience. Typically 7+ years of relevant industry experience, including at least 3 years in a network security architecture or technical leadership role. Certifications: Palo Alto PCNSE and/or Fortinet NSE 7 or above certification, or a relevant current equivalent; ITIL 4 Foundation certification. Preferred: CCNP Security, CCIE Security, CISSP or CISM certification; advanced degree; Arabic language proficiency.

Network Security Architecture & Governance: Own the layered, multi-vendor firewall architecture across perimeter and data centre boundaries; Define network segmentation, micro-segmentation and Zero Trust designs; Establish security reference designs, technical standards and firewall policy governance; Collaborate with network, infrastructure and cybersecurity architects; Evaluate technology options and assure security, performance, availability and resilience. Secure Connectivity & Network Access: Design site-to-site and remote-access VPN solutions and SD-WAN security integration; Define network access control using 802.1X, device profiling, posture assessment and guest/BYOD onboarding; Design secure out-of-band management, including dedicated management VRFs, bastion access, MFA and session recording; Incorporate secure time synchronisation and controlled administrative access. Application & Web Protection: Design web application firewall, load-balancing and SSL inspection capabilities; Define inline secure web gateway controls and layered DDoS mitigation; Establish IDS/IPS, threat prevention and sandboxing requirements; Ensure application protection integrates with the wider network security architecture. OT & Air-Gapped Security: Design OT security aligned with IEC 62443 principles; Define zone and conduit segmentation and controls for air-gapped environments; Incorporate unidirectional gateways and data diodes where required; Coordinate secure connectivity and information-flow requirements with relevant architecture teams. Security Operations Integration: Define vulnerability and patch remediation approaches for network and security devices; Integrate network security logs and events with SIEM, NDR and SOC platforms; Establish centralised firewall management, monitoring and rule-governance requirements; Support operational readiness and handover to NOC and security operations teams for 24/7 support. Technical Leadership & Delivery Assurance: Guide security engineers and review detailed designs and implementation deliverables; Govern build quality against approved architecture and security standards; Resolve complex technical issues across a multi-vendor delivery environment; Communicate architecture decisions, risks and dependencies clearly to programme stakeholders.