DMZ / Demilitarized Zone Architect

Job Description, DMZ Subject Matter Expert : Lead and support the implementation, maintenance DMZ environment. Assist with design of secure DMZ environments.Technical expertise in network segmentation, firewall policies, secure application hosting, and threat mitigation strategies within DMZ architectures.Key Responsibilities- Maintain, Implement, collaborate on Design of secure DMZ architectures for hosting public-facing applications and services.- Enforce security policies for traffic between internal, external, and DMZ zones.- Collaborate with network, security, and application teams to ensure compliance with security standards.- Conduct risk assessments provide resolutions specific to DMZ environments.- Review and optimize Firewall rules, NAT configurations, and access control lists (ACLs).- Provide technical guidance during audits, incident response, and change management processes.- Document DMZ configurations, network diagrams, and operational procedures.- Stay updated on emerging threats and technologies relevant to DMZ security.Required Skills & Qualifications- 7+ years of experience in network security, with at least 3 years focused on DMZ architecture.- Work experience of Segmentation, Firewalls (e.g., Checkpoint, Palo Alto, Cisco), IDS / IPS, and VPN technologies,- Strong understanding of Reverse Proxies, Load Balancers Web Application Firewalls.- Experience with multi-tier DMZs for separating services like web, mail, and database servers.- Knowledge of Routing protocols - Principles of traffic management : internal, DMZ, and external networks.- Skills in log analysis, SIEM integration, and alert configuration.- Skills in network auditing, documenting current DMZ configurations, and planning phased migration steps. Ability to create rollback plans and downtime schedules for critical services.- Familiarity with compliance frameworks.- Excellent troubleshooting, documentation, and communication skills.- Analytical skills to understand the existing Architecture. Critical thinking / Problem solving skills to ensure one can address issues encountered at DMZ, irrespective of Technology.- Relevant certifications (e.g., CISSP, CCNP Security, CEH) are a plus.