Job Purpose

Leading a team, the Senior ICT Security Architect is responsible for the end-to-end design, implementation, and management of secure, high-performance network infrastructure. This role encompasses architecture planning, service development, cybersecurity integration, and hands-on deployment of network solutions for both internal project and/or client premises. The position supports the full lifecycle of network services, from presales and design to Day 2 operations, ensuring alignment with enterprise needs and industry standards.

Key Responsibilities

Network Design & Architecture

• Design and document end-to-end campus network architecture, including wired and wireless solutions.
• Develop physical and logical designs, High-Level Designs (HLDs), Low-Level Designs (LLDs), and configuration templates for scalable and secure deployments.
• Align network architecture with enterprise and customer requirements.

Technology Strategy & Implementation

• Define the network technology roadmap and evaluate new releases, solutions and SDN features.
• Lead implementation of Firewalls, SD-WAN, Proxy, SASE, ZTNA and other trending solutions.
• Lead implementation of multi-tenant network access control (NAC) and campus network services hosted in data centers.
• Integrate network solutions with observability tools, automation, and service management platforms.
• Adopt a secure by design thinking approach on all related cybersecurity projects.

Service Development & Delivery

• Develop network service offerings with defined SLAs, cost models, and support tiers.
• Create engineering playbooks, reusable design patterns, and presales collateral.
• Package network infrastructure into a managed service model.
• Perform physical mounting, racking of equipment, configuration, and user acceptance testing for managed services projects.

Cybersecurity & Firewall Integration

• Design and enforce network access policies, segmentation, and NAC solutions.
• Integrate firewall rules, 802.1x, and Zero Trust principles into LAN/WLAN designs.
• Collaborate with cybersecurity teams to ensure compliance with standards such as PDPA, CSA CyberTrust Mark and ISO 27001.

Leadership & Collaboration

• Guide network engineers and delivery teams on network and security solutions.
• Lead technical discussions with customers, vendors, and internal stakeholders.
• Act as a subject matter expert (SME) during RFPs, project bids, and architecture reviews.
• Provide timely project updates and self-manage deliverables.

Qualifications

Education & Certification

• Degree in IT, Computer Science, or a related field.
• Advanced certifications in networking (e.g., CCNP, NSE 5,6,7) or other network security (e.g., firewall and switching certifications) preferred.

Experience

• 4+ years in enterprise network architecture, with proven experience in secure campus network services.
• Hands-on experience with NAC, switching, wireless, and security system integration.
• Proficiency in deploying and managing LAN, WAN, WLAN, VPN, firewall, and other network technologies.

Technical Skills

• Strong knowledge of network segmentation, VLAN, ACL, QoS, and firewall policy integration.
• Familiarity with automation (e.g., Python, APIs) and SDN/intent-based networking.
• Experience with cloud platforms (e.g., Azure, AWS) for hybrid environment setups is a plus.
• Bonus: Knowledge of load balancers, proxies, WAN optimizers, or voice/video networking.

Soft Skills

• Strong troubleshooting and analytical abilities.
• Effective communication across technical and non-technical teams.
• Ability to lead teams, provide mentorship, and engage in solution advisory.
• Excellent customer service skills and a proactive, adaptable attitude.