Infrastructure Security Architect

Location:
Sibiu, RO Cluj, RO Timisoara, RO Bucuresti, RO Brasov, RO Iasi, RO

Who we are

NTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.

What you'll be doing

• Create security architecture designs for network/infrastructure projects under supervision.
• Develop network diagrams, security zone models, and data flow diagrams following standards.
• Document design decisions and contribute to reference architectures and reusable patterns.
• Design firewall architectures, segmentation strategies, DMZ configurations, and VPN solutions.
• Create detailed rulesets, access control lists, and security policy designs.
• Support implementation of network security controls and document configurations.
• Design solutions for SIEM, endpoint protection, and monitoring platforms.
• Create technical specifications and integration approaches for security tools.
• Support proof-of-concept activities and vendor/product evaluations.
• Develop hardening standards and secure baseline configurations aligned with CIS Benchmarks.
• Create security configuration policies, validation procedures, and automation approaches.
• Document requirements and support configuration assessments and remediation planning.
• Produce architecture documents, diagrams, and design specifications under supervision.
• Maintain design repositories, configuration management, and technical guidelines.
• Contribute to governance processes and write operational runbooks.
• Support architecture reviews, gap analyses, and compliance assessments.
• Validate security controls against design requirements and identify weaknesses.
• Document findings, risks, and remediation recommendations.

What you'll bring along

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or related field
• Minimum 5–10 years of experience in cybersecurity or IT security roles
• Solid understanding of security architecture principles and design patterns
• Knowledge of network security architectures including defense in depth and zero trust
• Understanding of security zone models, network segmentation, and DMZ designs
• Familiarity with security frameworks (NIST CSF, ISO 27001, CIS Controls)
• Awareness of secure design principles for cloud and hybrid environments
• Network security: Firewalls, IPS/IDS, VPNs, proxies, NAC, load balancers
• Network protocols: Deep TCP/IP knowledge, routing protocols (BGP, OSPF), MPLS
• Switching and routing: VLANs, VXLANs, spanning tree, port security
• Security platforms: Palo Alto, Cisco ASA/Firepower, Fortinet, Check Point
• Virtualization: VMware NSX, network virtualization, micro-segmentation
• SIEM platforms: Splunk, QRadar, Azure Sentinel, ELK Stack
• Endpoint protection: CrowdStrike, Carbon Black, Microsoft Defender
• Network monitoring: NetFlow, IPFIX, packet capture, network behavior analysis
• Identity and access: Active Directory, Azure AD, LDAP, RADIUS, TACACS+
• Cloud security: AWS VPC, Azure Virtual Networks, GCP VPC security
• Diagramming: Microsoft Visio, Lucidchart, , enterprise architecture tools
• Infrastructure as Code: Terraform, CloudFormation, Ansible basics
• Version control: Git, document management systems
• Collaboration: Confluence, SharePoint, technical wikis
• Project management: Jira, ServiceNow, project documentation tools
• Clear technical communication with engineering teams and stakeholders
• Ability to translate security requirements into technical designs
• Collaborative approach to working with network, infrastructure, and security teams
• Problem-solving skills for complex security design challenges
• Attention to detail in technical specifications and documentation
• Time management and ability to prioritize multiple design activities
• CCNA Security or SSCP (Systems Security Certified Practitioner) - Mandatory
• Network security certification: Fortinet NSE4, Palo Alto PCNSA/PCNSE, or Cisco CyberOps - Required
• Security+ or equivalent foundation certification - Required
• Working toward: CISSP Associate, CCNP Security, or security architecture certifications
• Excellent command of both spoken and written English.

What's in it for you

New beginnings can be a challenge. We promise a smooth integration and a supportive mentor

Pick your working style: choose from Remote, Hybrid or Office work opportunities

Early bird or night owl? Our projects have different working hours to suit your needs

Nobody is born an expert. Sharpen your tech skills with our sponsored certifications, trainings and top e-learning platforms

We want you to stay healthy Enjoy our Private Health Insurance ⁠– it's custom-made for you

A clear mind is a healthy mind. Attend individual coaching sessions or go one step further by joining our accredited Coaching School

Make the most of our epic parties or themed events – they're lovingly designed for our people and their families

NTT DATA recruiters will never ask job seekers and candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties that may try to impersonate NTT DATA recruiters, either in writing or by phone, in an attempt to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will be associated with an email address. NTT DATA will not use any non-NTT DATA or personal email domains (Gmail, Yahoo, etc.) or personal communication channels (WhatsApp, Facebook etc) at any time during the recruitment process. If you suspect any fraudulent activity, please contact us.

NTT DATA Romania is an equal opportunity employer and considers all applicants regardless to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees.

Not the job for you? Perhaps you have a friend who would be a perfect fit.

What's in it for you

• New beginnings can be a challenge. We promise a smooth integration and a supportive mentor
• Pick your working style: choose from Remote, Hybrid or Office work opportunities
• Early bird or night owl? Our projects have different working hours to suit your needs
• Nobody is born an expert. Sharpen your tech skills with our sponsored certifications, trainings and top e-learning platforms
• We want you to stay healthy Enjoy our Private Health Insurance ⁠– it's custom-made for you
• A clear mind is a healthy mind. Attend individual coaching sessions or go one step further by joining our accredited Coaching School
• Make the most of our epic parties or themed events – they're lovingly designed for our people and their families

Your unique talent is what matters. NTT DATA Romania is an equal opportunity employer and considers all applicants regardless to race, color, religion, citizenship, national origin, ethnicity, age, gender, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic.

Third parties fraudulently posing as NTT DATA recruiters

NTT DATA recruiters will never ask job seekers and candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties that may try to impersonate NTT DATA recruiters, either in writing or by phone, in an attempt to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will be associated with an email address. NTT DATA will not use any non-NTT DATA or personal email domains (Gmail, Yahoo, etc.) or personal communication channels (WhatsApp, Facebook etc) at any time during the recruitment process. If you suspect any fraudulent activity, please contact us.

Job Segment: Network Security, Network, Information Technology, IT Architecture, Cyber Security, Security, Technology