DTICI_Techstack_Enterprise Network & Security_T6

The role acts as the architecture authority for network security, identity-based access, micro-segmentation, secure remote access, and connectivity services. Working closely with Security, Infrastructure, Operations, Service Owners, Product Teams, and Managed Service Providers, the architect develops target-state architectures, drives transformation initiatives, and ensures enterprise network services are secure, scalable, resilient, and aligned with business requirements.

A key responsibility is to design and implement Zero Trust network architectures that eliminate implicit trust through identity-aware access controls, continuous verification, policy-based segmentation, and integrated security controls.

Enterprise Network & Security Architecture

• Define and maintain enterprise network and security architecture standards, blueprints, and reference designs.
• Design secure architectures for campus, WAN, cloud, remote access, and enterprise connectivity services.
• Ensure network solutions align with enterprise security standards, regulatory requirements, and technology roadmaps.
• Develop scalable and reusable architecture patterns supporting global business operations.

Zero Trust Architecture & Security Transformation

• Lead the design and implementation of enterprise Zero Trust architecture strategies.
• Develop identity-based access models that continuously validate users, devices, applications, and network connections.
• Define security architectures that remove implicit trust and enforce least-privilege access principles.
• Establish architecture standards for:
  • Zero Trust Network Access (ZTNA)
  • Policy-Based Access Controls
  • Identity-Aware Networking
  • Continuous Verification Models
  • Secure Remote Access
• Partner with Security, IAM, and Infrastructure teams to drive enterprise-wide Zero Trust adoption.

Network Segmentation & Micro-Segmentation

• Define enterprise segmentation and micro-segmentation architecture frameworks.
• Design security zones, trust boundaries, and east-west traffic protection models.
• Lead Zero Trust enforcement initiatives across campus, data center, cloud, and remote access environments.
• Act as architecture owner for common firewall ruleset governance and policy standardization.
• Establish reusable segmentation patterns supporting workload isolation and risk reduction.
• Ensure alignment between segmentation strategies and business security requirements.

Network Security & Secure Connectivity Services

• Define architecture standards for:
  • Firewall Services
  • Secure Routing
  • Remote Access
  • VPN Technologies
  • Proxy Services
  • Secure Internet Access
• Ensure consistent implementation of security controls across enterprise connectivity services.
• Drive modernization of secure access and connectivity solutions.

Product & Technology Ownership

Act as Product or Technology Owner for:

• Third-Party Access VPN (3PA)
• Secure Employee Access VPN (SEA-VPN)
• Proxy Services
• Additional enterprise connectivity services as assigned

Responsibilities include:

• Technology roadmap development
• Service lifecycle management
• Continuous improvement planning
• Service modernization initiatives
• Technology standardization

Service Delivery Governance

• Provide architectural oversight for delivery and operation of enterprise connectivity services.
• Partner with service owners and managed service providers to ensure service quality and compliance.
• Support service lifecycle activities including design, transition, operation, and optimization.
• Drive service performance improvements and operational maturity initiatives.

Network Transformation & Migration Design

• Define target-state architectures supporting network and security modernization programs.
• Develop migration strategies from legacy (brownfield) environments to future-state architectures.
• Design phased rollout plans, transition frameworks, and risk mitigation approaches.
• Support transformation programs involving segmentation, connectivity modernization, and Zero Trust implementation.
• Provide architecture leadership during deployment and operational transition activities.

Monitoring, Observability & Operational Intelligence

• Ensure observability requirements are incorporated into architecture designs.
• Utilize telemetry, traffic-flow analytics, performance metrics, and operational insights to support architecture decisions.
• Define architecture requirements for monitoring, visibility, and service assurance capabilities.
• Collaborate with operations teams to improve proactive detection, troubleshooting, and performance management.

Transformation & Rollout Steering

• Participate in transformation governance and rollout steering activities.
• Provide architecture leadership for global deployment initiatives.
• Ensure adherence to architecture standards during implementation.
• Support readiness assessments, implementation reviews, and deployment validation activities.
• Drive alignment between architecture, operations, security, and business stakeholders.

Provider & Regional Collaboration

• Collaborate with Managed Service Providers, security vendors, and regional IT teams.
• Support global rollout activities across APAC, EMEA, North America, and LATAM.
• Ensure consistent implementation of architecture standards and security controls globally.
• Provide technical leadership and architecture guidance throughout project lifecycles.

Documentation Governance & Knowledge Management

• Develop and maintain:
  • High-Level Designs (HLD) & Low-Level Designs (LLD)
  • Architecture Standards & Security Design Guidelines
  • Reference Architectures & Best Practice Documentation

Govern architecture repositories and documentation standards.

• Bachelor's Degree in Computer Science, Information Technology, Telecommunications, Engineering, or related discipline.