The Lead Architect – Network Security role serves as the senior-most technical and architectural resource for enterprise Network Security. Owns enterprise Network Security reference architectures, engineering standards, design patterns, implementation patterns, and technology roadmaps aligned with Avangrid and Iberdrola global standards.Leads architecture and technical design for firewalls, secure web gateways, web application firewalls, SD-WAN security, network segmentation, Internet and intranet security, cloud connectivity security, and related Network Security platforms.Provides architecture governance and reviews project designs, lifecycle plans, technical standards, and high-risk changes for alignment with business requirements, security requirements, supportability, resiliency, and global standards.Serves as senior technical authority and highest escalation point for complex troubleshooting, root-cause analysis, major incidents, break/fix issues, lifecycle upgrades, technical recovery activities, and critical Network Security changes.Leads Network Security modernization, automation, standardization, resiliency improvement, lifecycle management, technical-debt reduction, and continuous improvement of Internet, intranet, and enterprise security infrastructure.Evaluates emerging Network Security technologies and recommends adoption, replacement, or retirement decisions based on business value, risk, operational impact, supportability, lifecycle position, and strategic alignment.Directs technical execution for complex projects and high-risk changes by translating business, operational, regulatory, and security requirements into secure Network Security architectures and process designs.Provides technical direction, mentoring, and documented knowledge transfer to internal engineers, global counterparts, outsourced service providers, and contracted support resources while retaining internal architecture accountability.Manages technical relationships with technology vendors and outsourced service providers, coordinates design and implementation activities, and ensures technical deliverables are executed according to approved architecture and standards.Partners with Cybersecurity, Infrastructure, Cloud, Applications, Audit, Compliance, Network Engineering, and global counterparts on architecture decisions, security investigations, risk assessments, audits, and regulatory requirements where Network Security expertise is required.Produces and maintains architecture diagrams, engineering standards, design decisions, implementation patterns, troubleshooting procedures, operational runbooks, recovery documentation, and resolution scripts.Owns or governs administration, configuration, optimization, and lifecycle activities for enterprise Network Security platforms, including firewall policy management, high-availability design, firmware upgrades, secure web gateway policies, web application firewall tuning, SD-WAN security, SIEM integration, and automation integration where applicable. Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field; an equivalent combination of education and experience may be considered.At least eight (8) years of progressively responsible enterprise Network Security experience.Demonstrated experience leading the architecture, design, implementation, lifecycle management, and operational support of complex enterprise Network Security environments.Advanced hands-on troubleshooting, root-cause analysis, and incident-resolution experience across enterprise Network Security infrastructure.Experience providing technical leadership across internal teams, global counterparts, vendors, and contracted service providers.Experience creating technology roadmaps, architecture standards, modernization plans, operational runbooks, and technical documentation. Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee’s management.
Create an account to see the full posting, access our search engine, and more.You're just 60 seconds away from your new Creativeloft account.