Senior Network Security Architect

Summary

This role is primarily responsible for the architecture, design, and implementation of global network security solutions. This role reports into the Corporate IT Security leadership and work within the IT function and the business to ensure that we meet and exceed the security requirements from Celestica customers. This role will also have to coordinate with external vendors and internal IT teams to ensure that the cybersecurity requirements are met and exceeded.

Detailed Description

Performs tasks such as, but not limited to, the following:

• Architects, designs, and oversees the deployment of enterprise security solutions, specifically focusing on Checkpoint firewalls and Zscaler Zero Trust implementations.


• Leads the product selection process for new security technologies, conducting Proof of Concepts (POCs) and technical evaluations to ensure alignment with business goals.


• Develops comprehensive technical project plans and manages the execution of complex network security projects from initiation to closure.


• Ensures and manages governance and maintenance of the Network Security Architecture landscape (applications, systems, etc) and roadmap.


• Establishes and maintains effective relationships with process owners/sites to proactively assess business risks and develop risk mitigation.


• Evaluates general and specific training needs; delivers training to support the control environment and associated control framework.


• Design and implementation of Zero Trust Architecture (ZTA) principles across the global network infrastructure.


• Builds up the governance process for network security policies and rules.


• Communicates governance and compliance objectives, fosters a compliant and risk

Knowledge/Skills/Competencies

• Must have strong knowledge of Access Management, DLP solution, SIEM technology and Auditing and Log monitoring (tools, processes, techniques).


• 
  

  Network Security Architecture: Deep expertise in architecting solutions with Checkpoint firewalls and Zscaler Zero Trust solutions.

  
  


• 
  

  Project Management: A good understanding of project management and developing technical project plans.

  
  


• 
  

  Product Selection: A good understanding of product selection processes and vendor management.

  
  


• 
  

  Knowledge and expereince in IT Security Best Practices and IT Governance and Audit Procedures.

  
  

   

  
  


• 
  

  Knowledge of common information security frameworks and IT controls frameworks, such as ISO/IEC 27001, ITIL, COBIT/COSO and ones from NIST.

  
  


• 
  

   

  
  

  Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.

  
  

   

  
  


• 
  

  Strong presentation skills for communicating architectural designs to executive leadership.

  
  


• 
  

  Leadership skills, ability to motivate people.

  
  

   

  
  


• 
  

  Organized and able to meet deadlines.

  
  

Physical Demands

• Duties of this position are performed in a normal office environment.


• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.


• Occasional overnight travel is required.

Typical Experience

• 
  

  10+ years previous experience in a similar role/industry. 

  
  

   

  
  


• 
  

  Extensive hands-on experience designing and deploying Checkpoint Firewalls and Zscaler Internet Access (ZIA)/Zscaler Private Access (ZPA).

  
  

Typical Education

• Bachelors Degree.


• CISSP, CCSE (Checkpoint Certified Security Expert), or Zscaler certifications a plus

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.