Network Security Architect Digital Platforms

Description

Summary: Seeking a Network Architect to lead the evolution of connectivity and network security architecture towards a modern Zero Trust and SASE-based model for digital platforms. Highlights: 1. Design and maintain enterprise-grade SASE architecture 2. Architect and evolve Zero Trust Network Access solutions 3. Collaborate with Corporate Security, Cloud, IT Operations, and Compliance teams **G\+D makes the lives of billions of people around the world more secure. We create trust in the digital age with integrated security technologies in three business areas: Digital Security, Financial Platforms and Currency Technology. We have been a reliable partner for our customers for over 170 years with our innovative solutions for SecurityTech! We are an international technology group and traditional family business with over 14,000 employees in 40 countries. Creating Confidence is our path to success. Trust is the basis of our co\-operation within G\+D.****At Payment Technology, our mission is to be at the start of every transaction and to make it secure and simple. We also create contemporary payment and banking solutions for our digital age. As a one\-stop shop, we produce and personalise hundreds of millions of payment cards every year and store their "digital twins" \- mobile and digital. Would you like to actively shape the digital transformation with us?** At G\+D, we are looking for a **Network Architect – Digital Platforms** to lead the evolution of our connectivity and network security architecture towards a **modern Zero Trust and SASE\-based model**.This role plays a key part in transforming traditional IT architectures into secure, scalable, and compliant digital platforms, working closely with **Corporate Security, Cloud, IT Operations, and Compliance teams**. You will collaborate with colleagues across **Spain, Germany, and India** in an international environment.**Your Responsibilities** ------------------------- As Network Architect – Digital Platforms, you will be responsible for defining and driving the network and connectivity architecture for modern digital platforms, ensuring alignment with corporate security standards and regulatory frameworks. Your main duties include:* Design, implement, and maintain an **enterprise\-grade SASE architecture**, covering SD‑WAN, CASB, SWG, ZTNA, FWaaS, and DNS Security * Architect and evolve **Zero Trust Network Access (ZTNA)** solutions based on identity\-centric, least\-privilege access principles * Design **secure, scalable architectures** for hybrid and multi\-cloud environments (Azure, AWS, GCP) * Lead the assessment, selection, and integration of **network and security technologies** aligned with business needs and security maturity * Drive the deployment and integration of SASE platforms such as **Zscaler or Palo Alto Prisma Access** * Implement **Zero Trust controls** across identity, endpoints, network infrastructure, and cloud workloads * Define and enforce policies for: + Identity\-based access control + Network segmentation and micro\-segmentation + Secure remote access + Cloud traffic inspection + Data protection * Establish **architectural standards, security best practices, and reference architectures** * Collaborate closely with **Corporate Security, IT Operations, Cloud, Datacenter, and Compliance teams** to align network architecture and security strategies * Act as a key architectural advisor, explaining design decisions, trade\-offs, and security implications to diverse stakeholders * Drive architectural evolution and transformation from traditional networks towards **Zero Trust and cloud\-native connectivity models** **Your Profile** ---------------- * Bachelor’s degree in **Computer Science, Information Systems**, or a related field * **5\+ years of relevant professional experience** in network or security architecture roles * Advanced experience designing and operating **enterprise SASE architectures**, including: + SD‑WAN + Secure Web Gateway (SWG) + CASB + ZTNA + FWaaS + DNS Security * Strong **Zero Trust expertise**, including identity\-driven access, continuous verification, least privilege, and micro\-segmentation * Deep understanding of **hybrid and multi\-cloud architectures**, including: + Azure, AWS, and cloud networking + Secure connectivity for IaaS, PaaS, and SaaS * Proven experience evaluating and integrating **security and networking technologies**, including SASE platforms such as Zscaler or Palo Alto Prisma Access * Hands\-on experience defining and enforcing **security standards and policies**, aligned with frameworks such as **NIST or PCI DSS** * Strong architectural communication skills, able to clearly explain complex designs and trade\-offs * Strong collaboration and cross\-functional leadership skills, partnering effectively with Security, Cloud, Datacenter, and Application teams * Analytical and structured problem\-solving mindset * Experience driving change and transformation initiatives in complex IT environments * Strong sense of ownership and accountability for secure, reliable, and scalable infrastructure solutions * Excellent **communication skills in English** (Spanish is a plus) * **Culture and Diversity:** Join a people oriented environment with different nationalities and a great team spirit, flat hierarchies (everyone speaks to everyone). Equal Opportunity Employer and LGBT\+ friendly. * **Global Collaboration:** Enjoy collaborative work in Agile/SCRUM teams and with stakeholders around the globe. * **Open working space** with Best\-in\-class equipment: High\-performance PC with huge monitors. * **Innovative Products:** Design and develop business processes and IT solutions for innovative products and digital solutions. * **Career Development:** Continuous training and coaching, talent program. * **Social Benefits:** flexible compensation (transport tickets, childcare vouchers, training, private insurance) and in\-house parking. * **Flexible work time and remote work:** M\-Th 8\.30 – 17\.30 and Fri 8\.30 – 15\.30, hybrid model. * **Own Canteen:** Take a break with our breakfast and lunch service: Choose between a big range of menus, salad desk and sandwich service. Fruit packages. * **Location:** El Prat de Llobregat. Easy communication by public transport (Bus 88 and 110, Metro L10 Riu Vell from Barcelona, PR4 from El Prat) o private transport. **Learn more about G\+D** ------------------------- Explore what makes G\+D unique – check out this video:Giesecke\+Devrient – We make the lives of billions of people more secure. **Privacy Notice** ------------------ The personal data you provide will be processed to manage your application in accordance with the GDPR and our Privacy Policy, available at Data Privacy \| G\+D.### ### **A look behind the scenes** ### **Contact** **HR Team Spain** seleccion.gdi@gi\-de.com ### **JOB OFFER****Job Details** --------------- **Job Title** Network Security Architect Digital Platforms **Business Sector** Giesecke \+ Devrient ePayments Iberia S.A C/ 114 nº 27 Polígon Pratenc **Requisition ID** 26992 **Location** Prat de Llobregat (BCN), ES **Career level** Experienced and Graduates **Job Type** Fulltime **Contact** HR Team Spain seleccion.gdi@gi\-de.com We are an equal opportunity employer! We promote diversity in all its forms and create an inclusive work environment, free from prejudice, discrimination and harassment, in which all employees feel a sense of belonging. We warmly welcome all applications regardless of gender, age, race or ethnic origin, social and cultural background, religion, disability and sexual orientation.