Principal Network Security Architect

Evolution Cloud Services (EVOCS)

2h • $120 - $150

About The Position

EVOCS is a hyper-fast-growing company that empowers businesses with advisory expertise and ideal technologies to provide comprehensive solutions for growth and prosperity. Founded by passionate experts, EVOCS has become a trusted partner to industry leaders. We are seeking an individual contributor with real authority, not a management seat, to join our agile team and contribute to our success story. This role exists because we need a design authority who can interpret network security findings, recommend architectures, and defend those recommendations to clients. You will work alongside our security leadership, with an independent third-party firm reviewing our findings.

Requirements

• 15+ years in network security engineering and architecture, with significant hands-on experience as a principal consultant, enterprise architect, or equivalent senior individual contributor.
• Deep Fortinet expertise at fleet scale, including FortiGate design, hardening, and rule-base architecture for estates in the hundreds of devices.
• Expertise with FortiManager, including template hierarchies, policy packages, global objects, and ADOM structure.
• Experience with rule bases containing tens of thousands of policies, understanding hit-count reliability, shadowing, and owner-attribution issues.
• Fluency in common issues with managed fleets, such as configuration drift, out-of-sync devices, failed policy package installs, and revision-restore rollbacks.
• Experience with automation against FortiManager using the JSON API, Ansible, or equivalent tools for state pulling, configuration validation, and drift detection.
• Ability to recall device count, policy count, and FortiManager ADOM/template structure of the largest estate owned.
• Expertise in FortiAnalyzer logging architecture and understanding the capabilities and limitations of firewall telemetry for compromise evidence.
• Strong judgment on segmentation and lateral movement, with the ability to assess real exposures from rule bases and topologies.
• Experience with administrative access architecture, including FortiAuthenticator with Active Directory, MFA, RBAC, and privileged access design (jump host or PAM).
• Knowledge of Azure networking (VNets, NSGs, routing) and FortiGate virtual appliances in a hybrid estate.
• Fortinet certification at FCSS in Network Security or NSE 7 level, or equivalent demonstrated FortiOS depth.
• Client-facing consulting experience, including report writing, presenting findings, and defending them.
• Proven track record of directing and reviewing the work of junior and offshore engineers.
• Excellent writing skills, capable of producing findings and designs for CISOs without extensive editing.
• Based in North America and authorized to work without sponsorship.

Nice To Haves

• CCIE Security, or Fortinet at FCX or NSE 8 level.
• CISSP, CISM, or GIAC certifications.
• Experience in data center, colocation, or critical infrastructure environments.
• Experience with assessment or audit-driven work where findings survived scrutiny from clients, auditors, or independent reviewers.
• Experience turning assessment findings into executable remediation designs delivered by others.

Responsibilities

• Serve as the design authority for network security architecture and configuration assessments.
• Conduct adversary-path analysis, reasoning from configuration, rule base, topology, and administrative access to identify potential attacker movement.
• Develop the hardening baseline and remediation roadmap, ensuring specificity for execution and correctness for client architect agreement.
• Define the golden configuration and governance model, including a repeatable configuration standard and change control processes.
• Act as the senior escalation point for the delivery team and the counterpart to the independent reviewer.
• Present findings to client engineering and security leadership.
• Direct and review the work of engineers gathering and analyzing fleet data, including offshore resources, ensuring quality over the team's output.

Benefits

• Consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed