Senior Network Security Architect

The role 

We are seeking a Senior Network Security Architect to join our Network team. This position combines deep expertise in network engineering and cybersecurity, with a focus on designing secure, scalable, and resilient architectures for enterprise and data center environments.

You will be responsible for developing end-to-end network security designs for complex backbone and fabric infrastructures, ensuring alignment with corporate security standards, and driving design reviews in collaboration with the Security and Infrastructure teams.

The role requires hands-on expertise with next-generation firewalls, a deep understanding of routing and switching, and the ability to influence architecture direction across multiple technical domains.

You will also mentor engineers, lead design sessions, and contribute to defining the future of secure network connectivity across on-prem and cloud platforms.  

You’re welcome to work in our office in Amsterdam, The Netherlands or Remote within the EU

Your responsibilities will include: 

• Design secure architectures for enterprise office networks, VPN, and remote access solutions.
• Architect and validate data center fabric/backbone and WAN security designs at scale.
• Lead firewall architecture and policy design across platforms such as Palo Alto and Check Point.
• Define and maintain segmentation models, internet edge, DMZ, and Zero Trust network patterns.
• Perform threat modeling and risk assessments for network and connectivity solutions.
• Ensure network security designs align with industry standards and compliance frameworks (e.g., ISO 27001, SOC 2, NIST).
• Implement automation for configuration, policy deployment, monitoring, and compliance validation using Python, Go, or equivalent tools.
• Collaborate closely with Security, Platform, and Cloud teams to ensure secure integration across environments.
• Lead incident resolution efforts, perform root cause analysis, and guide the team through complex troubleshooting.
• Prepare and present architecture documents for technical and executive review.
• Act as a senior technical mentor and contribute to defining long-term network security strategy.  

We expect you to have: 

• Proven expertise in networking (TCP/IP, routing protocols, switching) and security architecture.
• Experience designing and securing enterprise, data center, or cloud network infrastructures.
• Hands-on proficiency with next-generation firewalls (Palo Alto, Check Point, or equivalent).
• Practical experience with network automation and scripting in Python, Go, or similar.
• Strong knowledge of Unix/Linux systems and major network vendors (Cisco, Juniper, Aruba, etc.).
• Ability to independently design and document complex architectures with clarity.
• Excellent interpersonal and communication skills, with experience influencing across teams. 
• Excellent written and spoken English communication skills.

It will be an added bonus if you have: 

• Working knowledge of IPv6 and modern routing protocols.
• Experience with automation and infrastructure-as-code tools (Ansible, Terraform, NetBox, SaltStack, etc.).
• Background in large-scale, high-availability distributed systems.
• Familiarity with Zero Trust principles, micro-segmentation, and SASE/SD-WAN architectures.
• Knowledge of identity-based networking and integration with IAM/IdP systems.
• Experience with network visibility and analytics (e.g., Splunk, Zeek, NetFlow).
• Relevant certifications such as CCNP/CCIE, PCNSE, CCSE, or CISSP.