Sr. Network Security Architect

The Senior Network Security Architect is responsible for contributing to the design and implementation of enterprise security strategies, architectures, and solutions to protect the company’s network and meet security and compliance requirements. This role supports the production environment and ensures appropriate security policies and practices are implemented and enforced. It also conducts penetration and vulnerability testing and reporting. 

The Senior Network Security Architect collaborates with stakeholders to develop secure, scalable, and cost-effective solutions. This role also works with vendors to evaluate and adopt evolving technologies to meet rapidly changing requirements. This role may also install and configure Cisco LAN, WAN, and wireless infrastructure, assist in maintaining the operating system and security software used on the network, and perform maintenance to enhance network availability.

Job Functions:

• Design and Implementation – * Perform multi-vendor firewall migration, proof of concept/new product design for security platforms, network policy design, and gap analysis security initiatives. * Create network design documentation based on the requirements and best practices. * Build a secure, efficient, and scalable network infrastructure that meets organization’s needs & standards. * Build network configurations and installations, coordinate network changes, and communicate with impacted stakeholders.
• Research – * Understand advances and changes in the technology industry and work directly with equipment manufacturers to assess new technologies.
• Support – * Act as the highest level of engineering escalation for production issues. * Provide system support and troubleshooting expertise as needed for designed solutions. * Provide technical and tactical support to team subordinates as needed.
• Incident Response – * Participate in the development of incident response plans and procedures to detect, respond to, and recover from security incidents and breaches.

Required for all Jobs:

• Performs other duties as assigned.
• Complies with all policies and standards.

Qualifications:

• Education: Bachelor’s degree in computer science, information technology, other advanced science, or engineering field required. Master’s degree preferred.
• Work Experience: 5+ years Designing & implementing large-scale network security infrastructure both on-prem and cloud required. 5+ years Deploying, migrating & automating the network security infrastructure in large-scale environments required. 5+ years Design and management of in centralized multi-vendor firewalls required. 1+ years in the cruise and/or travel industry preferred.

Knowledge, Skills & Abilities:

• Strong knowledge of various network security technologies such as Firewall (Juniper or Palo Alto), IPS, AV, Micro-segmentation, Zero-Day attack, Cloud security group management, MFA & Analytics, and Network detection and response.
• Generic knowledge of Network security concepts in Virtualization platforms such as Kubernetes & VMware.
• Knowledge of EVPN VXLAN is a plus.
• Dynamic Routing: Experience in any of these routing protocols (BGP. OSPF, EIGRP) is preferred.
• Ability to write comprehensive and concise technical reports and presentations to be consumed by non-technical individuals.
• Ability to write network and security documentation, policies, and guidelines that meet industry standards.
• Ability to write network and security documentation, policies, and guidelines that meet industry standards.
• Proficiency in MS Office.
• Ability to create informative and engaging PowerPoint presentations and deliver them to various audiences, including management.
• Proven track record of working collaboratively with cross-functional teams to achieve common goals and drive results.
• Ability to think critically, problem-solve creatively, and perform root cause analysis.
• Ability to quickly learn new technologies and concepts.
• Analytical and detail-oriented with a strong business sense.
• Ability to be flexible to changing priorities, manage tight deadlines, prioritize workload, and achieve effective results.
• Excellent communication, team building, conflict management, and organizational skills.

Licenses & Certifications:

• CCNP – Cisco Certified Network Professional upon hire preferred.
• Juniper Networks Certified Professional (JNCIP-DC) upon hire preferred.
• PCNSA upon hire preferred.

Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time. 

Travel: Less than 25% with ship based/shore based travel likely.

Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

The range for this role’s salary $85,000-$130,000. Offers to the selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience. 

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
• Cost-effective medical, dental and vision plans
• Employee Assistance Program and other mental health resources
• Additional programs include company paid term life insurance and disability coverage
• Financial Benefits:
• 401(k) plan that includes a company match
• Employee Stock Purchase plan
• Paid Time Off
• Holidays – All full-time and part-time with benefits employees receive days off for 7 company-wide holidays, plus an additional floating holiday to be taken at the employee’s discretion.
• Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
• Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
• Other Benefits
• Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
• Personal and professional learning and development resources including tuition reimbursement
• On-site preschool program, wellness center, and health clinic at our Miami campus

#LI-SH1

#LI-Remote

In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.

Carnival Cruise Line is the most popular cruise brand in North America and operates a fleet of ships designed to foster exceptionally safe, fun and memorable vacation experiences at an outstanding value. Our employees have a responsibility to be accountable for all actions. We consider the environment in all aspects of our business and have a responsibility to put safety and sustainability first. We live and share a positive attitude which is based on fostering an environment of inclusion, trust, a willingness to listen, openness and integrity. Doing this helps us to achieve our ultimate goal, which is to include FUN in everything we do! Speaking of fun, we are officially certified as a Great Place to Work aboard our ships as well as in our global corporate headquarters!

Carnival Corporation & plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law. 

https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf 

https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf 

https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf 

https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf 

Read Full Description