Network Security Architect

About This Opportunity

CTI Staffing is partnering with a leading transportation and logistics organization to find a Network Security Architect for their network security team, based in the Fort Worth, TX area (remote with periodic onsite).

This team owns secure network infrastructure across a hybrid on-prem and cloud environment — the person in this seat will shape how the organization connects, routes, and protects traffic at enterprise scale, not just maintain what's already built.

What You'll Do

• Design and architect secure network solutions aligned to organizational security policy and compliance requirements
  
  


• Implement and manage hybrid connectivity across on-premises and cloud environments
  
  


• Configure and optimize routing protocols for performance and redundancy
  
  


• Deploy and manage next-gen firewall solutions for threat protection
  
  


• Design DNS strategies for secure name resolution and traffic management
  
  


• Architect private networking solutions including network segmentation and zero-trust design
  
  


• Translate business requirements into secure network architecture alongside cross-functional teams
  
  


• Provide technical leadership and mentoring to network engineering staff
  
  

Requirements

What You Bring

Must-Have:

• Expertise establishing and managing secure hybrid connectivity (VPN, ExpressRoute or equivalent)
  
  


• Advanced knowledge of routing protocols (BGP, OSPF) and multi-path route optimization
  
  


• Hands-on experience configuring, managing, and troubleshooting next-generation firewall platforms
  
  


• Deep understanding of DNS architecture and security (DNSSEC, DNS filtering, DNS-based threat prevention)
  
  


• Experience designing private networks, network segmentation, and zero-trust architectures
  
  


• 5+ years of network security architecture experience
  
  


• Strong cross-functional communication — able to translate business needs into technical architecture
  
  

Nice-to-Have:

• CISSP, CEH, or equivalent network security certification
  
  


• Experience in a regulated or high-availability industry (transportation, finance, healthcare)
  
  


• Experience mentoring network engineering teams
  
  


• Cloud security architecture experience (Azure preferred)
  
  

Technical Environment:

• Palo Alto Networks, Azure Firewall
  
  


• BGP, OSPF
  
  


• Azure hybrid networking (VNets, ExpressRoute)
  
  


• DNS/DNSSEC
  
  

What Success Looks Like:

• Secure network architecture designed and documented for a major hybrid connectivity initiative
  
  


• Firewall and DNS security policy implemented and validated against compliance requirements
  
  


• Trusted technical voice in cross-functional design reviews within the first 90 days