Information Security Architect

About the role

Ryder is hiring a Network Security Architect to oversee the design and implementation of internal security infrastructure. You will manage projects from initial concept through technical execution, working directly with engineering teams to build and deploy solutions.

Key facts

What you'll do

• Develop network security architecture including firewall configurations, segmentation, Zero Trust models, and Azure cloud environments.
• Manage end-to-end technical migrations by assessing current states, designing target architectures, and handling cutovers.
• Collaborate with engineering teams during the build phase to adjust designs in real time.
• Identify and remediate technical debt within legacy network security configurations.
• Estimate project scope and resource requirements for security architecture initiatives.
• Document physical and conceptual architecture, including detailed configuration specifications.
• Process Request Security Architecture tickets via ServiceNow.

Requirements

• Bachelor degree in Computer Science, Information Security, or a related field.
• Minimum 7 years of experience in an Information Security Architect role.
• Minimum 7 years of experience with regulatory compliance and security frameworks such as NIST 800/CSF, ISO 27001, or COBIT.
• Advanced hands-on experience with network protocols, design, and access control.
• Advanced knowledge of encryption, data protection, and access privilege design.
• Intermediate proficiency in Microsoft Windows, Linux, JSON, and regex.
• Required certification: One or more Palo Alto Network certifications (PCNSA, PCNSE, PCCSE, or PCSAE).

Nice to have

• Experience with APIs and infrastructure as code tools like Terraform, CloudFormation, Azure Resource Manager, or GCP Cloud Deployment Manager.
• In-depth experience installing and configuring security features in Azure, AWS, or GCP.
• Background in DevSecOps environments.
• Experience with vulnerability management, runtime defense, and anti-malware systems.
• Additional certifications such as CISSP or GIAC.

Skills & tools

• Firewall platforms
• Microsoft Azure
• ServiceNow
• Network segmentation
• Zero Trust architecture

Practical notes

• Travel requirement is 0-10 percent.
• This position is eligible for medical, dental, vision, life insurance, disability insurance, paid time off, and a 401(k) plan.
• Ryder will never conduct interviews via chat apps like WhatsApp or Telegram and will only communicate via @ryder.com email addresses.