Senior Network Security Architect

Job Title : Senior Network Security Architect Job Description : We are seeking an accomplished Senior Network Architect to spearhead the design, planning, and deployment of large-scale data center networks and advanced cloud security solutions.The ideal candidate will have deep expertise in Palo Alto Prisma, Zscaler, Cisco ISE, Aruba ClearPass, and Secure Access Service Edge (SASE) solutions, with a proven track record of architecting and implementing complex network infrastructures across multi-cloud environments (AWS, Azure, GCP). Exceptional skills in creating Low-Level Design (LLD) and High-Level Design (HLD) documentation, along with strong leadership and communication abilities, are critical for driving enterprise-grade network transformations. Key Responsibilities : - Architect and design secure, scalable, and high-performance network infrastructures for large data centers and multi-cloud environments. -Lead the planning, deployment, and optimization of Palo Alto Prisma, Zscaler, Cisco ISE, and Aruba ClearPass solutions to deliver robust network security and access control. - Design and implement SASE frameworks to enhance secure connectivity across AWS, Azure, and GCP environments. - Develop detailed LLD and HLD solution documents, ensuring alignment with business objectives and compliance requirements. - Collaborate with stakeholders to define network strategies, technical roadmaps, and architecture blueprints. - Oversee end-to-end project execution, including network deployments, security integrations, and cloud connectivity solutions. - Provide expert-level troubleshooting for complex network and security issues, optimizing performance and reliability. - Stay abreast of industry trends and emerging technologies to recommend innovative network and security solutions. - Mentor and guide junior architects and engineers, promoting technical excellence and collaboration. Required Skills and Experience : - Minimum 12 years of professional experience in network architecture, with at least 7 years focused on large-scale data center planning and deployment. -Expert-level proficiency in Palo Alto Prisma (Cloud, Access, etc.) for cloud-native security and firewall management. -Extensive experience with Zscaler for cloud security, zero-trust access, and secure web gateways. -Advanced knowledge of Cisco Identity Services Engine (ISE)for network access control, policy enforcement, and identity management. - Strong expertise in Aruba ClearPass for NAC, guest access, and device profiling. - Proven experience implementingSASE solutionsfor secure, scalable cloud connectivity. - Hands-on experience designing and deploying networks in multi-cloud environments (AWS, Azure, GCP). - Deep understanding of data center networking (e.g., spine-leaf, VXLAN, BGP, EVPN). - Proficiency in creating comprehensive LLD and HLD documentation for network and security architectures. - Familiarity with network automation tools (e.g., Ansible, Terraform) and scripting (e.g., Python). - Demonstrated success leading large-scale network and security deployments, including Prisma, Zscaler, Cisco ISE, and ClearPass integrations. - Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to diverse audiences. Certifications : - Palo Alto Networks Certified Network Security Architect (PCNSA / PCNSE). - Zscaler Certified Cloud Professional (ZCCP) or equivalent. - Cisco CCIE Security or CCNP Security. - Aruba Certified ClearPass Professional (ACCP). - AWS Certified Solutions Architect, Microsoft Azure Solutions Architect, or Google Cloud Professional Cloud Architect. Qualifications : - Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience). Disclaimer HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and / or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to secure@hcltech.com for investigation. Compensation and Benefits A candidate’s pay within the range will depend on their work location, skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies : medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.