Network Security Architect

Description

The company is a global luxury group made up of several Maisons in jewelry, watches and high-end accessories. Each Maison keeps its own tradition of style, quality and craftsmanship, and the group balances preserving that heritage with designing new products through constant creativity.

The role sits within the network team that builds the secure, resilient networks linking offices, distribution centers, data centers and cloud platforms across the group's brands. It combines architecture leadership with hands-on engineering in security, automation and responsible AI adoption.

Responsibilities

• Define and own the reference architectures, standards and technology roadmaps for the global network, covering hybrid and multicloud environments.
• Weigh security, resilience, performance and cost against each other, working closely with the Cloud, Security, UC, Workplace and Platform teams to deliver designs that scale and last.
• Apply Zero Trust principles, identity-based controls, device posture checks and least-privilege access throughout the architecture.
• Lead the evolution of secure access, including SASE, SSE and ZTNA, and strengthen segmentation and access control against emerging threats.
• Design secure hybrid-cloud connectivity with controlled traffic flows and end-to-end encryption.
• Own the PKI strategy, including certificate and key lifecycle management.
• Build automated network change pipelines with Python, APIs and infrastructure-as-code tools such as Ansible and Terraform.
• Maintain a trusted source of truth, Git-based peer review, CI/CD testing, drift detection and secure secrets management.
• Make sure every change ships with a controlled rollout plan and a tested rollback.
• Define the network and data boundaries that let approved AI services run safely, including private endpoints, controlled egress, identity-aware access and workload segmentation.
• Work with Cybersecurity on AI telemetry and data-loss prevention, and set clear limits on AI agents' access to tools and APIs.
• Assess AI-assisted network operations and AIOps for measurable, real-world value, validating AI recommendations before they reach production.
• Keep sensitive configurations and secrets away from unapproved models, and require human approval, audit trails and safe rollback for every AI-driven change.
• Design for failure and fast recovery across wired, wireless, WAN and cloud networks.
• Use telemetry and capacity analysis to improve observability and resolve problems before users notice them.
• Lead complex incident investigations through to validated recovery, and share the lessons with the wider team.

Requirements

• Experience delivering enterprise network architecture, with hands-on work in routing, switching, Wi-Fi and troubleshooting, strong knowledge of TCP/IP, BGP and OSPF, and experience with WAN, VPN and datacenter or software-defined networking.
• Practical experience with network security and hybrid-cloud connectivity, including identity-based access, segmentation and resilient design, and sound judgment on risks and trade-offs.
• Hands-on Python and API automation with Ansible, Terraform or comparable tools, backed by version control, peer review, testing and safe delivery practices.
• Hands-on and architectural experience with Cisco ISE, including 802.1X, TACACS+/RADIUS, profiling, posture, guest access, policy design and segmentation models.
• Architecture leadership, clear documentation and cross-team collaboration.
• Fluent English and a bachelor's degree or equivalent practical experience.
• Experience with comparable technologies matters more than knowing every product. Useful but not required: AI security or AIOps experience, and relevant certifications or equivalent practical experience.
• Curiosity and disciplined learning are valued. No model-training experience is needed.

Conditions

The team's stack includes AWS and GCP, Cisco networking, Wi-Fi and ISE, RADIUS and 802.1X, SD-WAN, Cato Networks, and Zscaler ZIA and ZPA.

Benefits

• An international group of luxury Maisons offering competitive compensation and opportunities to grow.