Radware
Website:
radware.com
Job details:
About the Company
We are seeking a highly experienced Senior Infrastructure Security Architect to lead the security architecture of our global enterprise infrastructure. The role will focus on designing, governing, and continuously improving security across networks, identity, endpoints, data centers, hybrid cloud, remote access, monitoring, and resilience domains. The architect will partner closely with IT, Infrastructure, Security Operations, SOC, Cloud, and R&D teams to ensure secure, scalable, and practical architectures across corporate, production, and engineering environments.
About the Role
The Senior Infrastructure Security Architect will lead the security architecture of our global enterprise infrastructure, focusing on designing, governing, and continuously improving security across various domains.
Responsibilities
- Architecture & Design
- Own and lead infrastructure security architecture across global sites, hybrid cloud, data centers, corporate networks, endpoints, identity platforms, remote access, and operational technology where applicable.
- Define and govern security architecture for network segmentation, Zero Trust access, firewalls, VPN/ZTNA, SD-WAN/SASE, IAM, PAM, endpoint protection, cloud connectivity, logging, monitoring, and secure administration.
- Establish infrastructure security standards, reference architectures, patterns, and guardrails for globally distributed IT, cloud, and R&D environments.
- Drive secure infrastructure design for mergers, new sites, data center changes, cloud migrations, branch connectivity, and major technology refresh programs.
- Review and approve infrastructure designs to ensure secure-by-design principles, operational resilience, least privilege, observability, and compliance requirements are embedded from the start.
- Develop scalable, secure, and resilient infrastructure solutions for hybrid, multi-cloud, and globally distributed environments.
- Ensure infrastructure architecture aligns with security frameworks, regulatory requirements, audit expectations, and internal risk management standards.
- Application & AI Security Architecture
- Support application security architecture reviews for new platforms and major engineering initiatives, ensuring alignment with enterprise infrastructure security principles.
- Contribute to security architecture for AI/ML systems, including LLM-based applications, RAG pipelines, AI agents, and the underlying infrastructure, identity, data access, and monitoring controls that support them.
- Define governance and guardrails for internal and third-party AI tool adoption.
- Assess risks across the AI supply chain, including third-party models, APIs, and training data provenance.
- Establish AI-specific incident response procedures.
- Architect API security (authentication, rate limiting, gateway-level protections, API discovery/inventory).
- Define application-layer threat modeling practices (e.g., STRIDE) as a standard part of design reviews.
- Infrastructure Security Leadership
- Define and enforce infrastructure security frameworks, policies, baselines, hardening standards, and architecture review processes.
- Analyze and mitigate security risks across infrastructure platforms, cloud services, identity systems, endpoints, networks, and business-critical applications.
- Translate threat intelligence, incident learnings, audit findings, and vulnerability trends into practical infrastructure architecture improvements.
- Collaborate with SOC and IT teams to strengthen cybersecurity posture.
- Partner with infrastructure and operations teams to improve backup security, disaster recovery readiness, privileged administration, secure remote access, asset visibility, and configuration management.
- Strategic Advisory
- Act as a trusted advisor to executive leadership on technology trends and risks.
- Evaluate emerging technologies and recommend adoption strategies.
- Lead infrastructure architecture reviews and governance processes for strategic technology initiatives.
Experience:
- 10+ years in infrastructure security, security architecture, network security, identity security, cloud security, and enterprise IT security.
- Proven experience architecting and securing global enterprise infrastructure across multiple regions, sites, data centers, cloud platforms, and hybrid environments.
- Deep hands-on background in network security, identity and access management, PAM, endpoint security, cloud security, virtualization, storage, backup, monitoring, SIEM, XDR, vulnerability management, and security operations.
- Working knowledge of application security, API security, threat modeling, secure SDLC, and vulnerability management.
- Extensive experience working with R&D, DevOps, and product engineering teams.
- Experience or strong familiarity with AI security concepts, including LLM applications, AI agents, RAG architecture, data protection, model/API risk, and AI governance.
- Extensive experience leading large-scale IT security projects end to end.
- Strong experience with Zero Trust, SASE/SSE, network segmentation, secure remote access, firewall architecture, secure administration, and infrastructure hardening.
- Ability to create security architecture diagrams, standards, design reviews, risk assessments, and implementation guidance for infrastructure and cloud teams.
- Hands-on experience with Linux and Windows based platforms.
- Hands-on experience with firewalls, SIEM, XDR, CASB, DLP, EDR, vulnerability scanners, patch management, backup security, and configuration management tools.
- Experience with monitoring, automation and orchestration systems.
- Experience with securing R&D environments.
- Certifications: CISSP, CCSP, CCNP/CCIE Security, AWS/Azure Security or Architect, TOGAF, SABSA, or equivalent experience.
Required Skills
- Strong ability to balance security requirements with operational feasibility, business continuity, performance, and global scale.
- Strong analytical, leadership, and communication skills.
- Excellent spoken and written English.
- Ability to influence technical teams without direct authority and translate security requirements into practical engineering controls.
Preferred Skills
- Experience with securing R&D environments.
- Certifications: CISSP, CCSP, CCNP/CCIE Security, AWS/Azure Security or Architect, TOGAF, SABSA, or equivalent experience.
Click on Apply to know more.