Principal Network Architect - Network Security (Hybrid)

Citizens Bank - Boston, MA

Full-time - Senior

Boston, MA

Credit Intermediation and Related Activities

About the position

As a Principal Network Architect - Network Security at Citizens, you will play a crucial role in designing and implementing secure network architectures across various platforms, including AWS and Azure. Your expertise will guide the integration of innovative technologies while ensuring compliance with industry regulations. This position emphasizes collaboration with cross-functional teams and offers opportunities for professional growth and mentorship.

Responsibilities

• Design and implement secure network architectures in AWS, Azure, and on-premises data centers.
• Develop and document network security standards and guidelines.
• Conduct security assessments and penetration testing to identify vulnerabilities.
• Implement network segmentation and access control mechanisms.
• Manage and optimize the configuration of firewalls to prevent unauthorized access and data breaches.
• Develop and implement firewall rules and policies.
• Monitor firewall logs and alerts for suspicious activity.
• Perform regular firewall updates and maintenance.
• Implement and manage load balancers to ensure high availability and optimal performance of critical applications.
• Configure load balancing algorithms and health checks.
• Monitor load balancer performance and capacity.
• Ensure adherence to industry regulations and internal security policies.
• Conduct regular security audits and risk assessments.
• Implement security controls to meet compliance requirements.
• Develop and implement automated processes to improve efficiency and reduce the risk of human error.
• Collaborate with security teams to investigate security incidents and implement effective countermeasures.
• Manage relationships with security vendors to ensure optimal performance and support.
• Provide Tier 4 on-call support for all network technologies.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field preferred, or equivalent experience.
• 5+ years of proven experience designing and implementing secure network architectures in complex enterprise environments.
• In-depth knowledge of network security protocols (TCP/IP, BGP, OSPF) and cloud security best practices.
• Extensive experience with security technologies such as Palo Alto Networks firewalls, F5 load balancers, and Akamai CDN.
• Strong understanding of network segmentation, access control, and intrusion detection/prevention systems.
• Familiarity with GRC frameworks (e.g., NIST, ISO 27001) and the ability to translate security requirements into technical solutions.
• Proficiency in scripting languages (e.g., Python, PowerShell) and experience with automation tools (e.g., Ansible, Terraform).
• Hands-on experience with AWS and Azure cloud environments, including security best practices for multi-cloud design.

Nice-to-haves

• CISSP, CCNP Security, or other relevant certifications are a plus.

Benefits

• Comprehensive medical, dental and vision coverage
• Retirement benefits
• Maternity/paternity leave
• Flexible work arrangements
• Education reimbursement
• Wellness programs
• Paid time off policy that exceeds mandatory requirements