Network Security Architect Digital Platforms

At G+D, we are looking for a Network Architect – Digital Platforms to lead the evolution of our connectivity and network security architecture towards a modern Zero Trust and SASE-based model.

This role plays a key part in transforming traditional IT architectures into secure, scalable, and compliant digital platforms, working closely with Corporate Security, Cloud, IT Operations, and Compliance teams. You will collaborate with colleagues across Spain, Germany, and India in an international environment.

Your Responsibilities

As Network Architect – Digital Platforms, you will be responsible for defining and driving the network and connectivity architecture for modern digital platforms, ensuring alignment with corporate security standards and regulatory frameworks.

Your main duties include:

• Design, implement, and maintain an enterprise-grade SASE architecture, covering SD‑WAN, CASB, SWG, ZTNA, FWaaS, and DNS Security
• Architect and evolve Zero Trust Network Access (ZTNA) solutions based on identity-centric, least-privilege access principles
• Design secure, scalable architectures for hybrid and multi-cloud environments (Azure, AWS, GCP)
• Lead the assessment, selection, and integration of network and security technologies aligned with business needs and security maturity
• Drive the deployment and integration of SASE platforms such as Zscaler or Palo Alto Prisma Access
• Implement Zero Trust controls across identity, endpoints, network infrastructure, and cloud workloads
• Define and enforce policies for:
  • Identity-based access control
  • Network segmentation and micro-segmentation
  • Secure remote access
  • Cloud traffic inspection
  • Data protection
• Establish architectural standards, security best practices, and reference architectures
• Collaborate closely with Corporate Security, IT Operations, Cloud, Datacenter, and Compliance teams to align network architecture and security strategies
• Act as a key architectural advisor, explaining design decisions, trade-offs, and security implications to diverse stakeholders
• Drive architectural evolution and transformation from traditional networks towards Zero Trust and cloud-native connectivity models

Your Profile

• Bachelor’s degree in Computer Science, Information Systems, or a related field
• 5+ years of relevant professional experience in network or security architecture roles
• Advanced experience designing and operating enterprise SASE architectures, including:
  • SD‑WAN
  • Secure Web Gateway (SWG)
  • CASB
  • ZTNA
  • FWaaS
  • DNS Security
• Strong Zero Trust expertise, including identity-driven access, continuous verification, least privilege, and micro-segmentation
• Deep understanding of hybrid and multi-cloud architectures, including:
  • Azure, AWS, and cloud networking
  • Secure connectivity for IaaS, PaaS, and SaaS
• Proven experience evaluating and integrating security and networking technologies, including SASE platforms such as Zscaler or Palo Alto Prisma Access
• Hands-on experience defining and enforcing security standards and policies, aligned with frameworks such as NIST or PCI DSS
• Strong architectural communication skills, able to clearly explain complex designs and trade-offs
• Strong collaboration and cross-functional leadership skills, partnering effectively with Security, Cloud, Datacenter, and Application teams
• Analytical and structured problem-solving mindset
• Experience driving change and transformation initiatives in complex IT environments
• Strong sense of ownership and accountability for secure, reliable, and scalable infrastructure solutions
• Excellent communication skills in English (Spanish is a plus)