Sr Transformation Architect

Join GDT and be part of a dynamic team where innovation meets excellence! At GDT, our employees are the cornerstone of our success. GDT offers a people-first culture focused on inclusivity, growth, and innovation. Employees have access to career development opportunities, cutting-edge technology, and a collaborative environment. Employees are empowered to make a meaningful impact and are recognized for their contributions. As a global IT services company, we prioritize attracting, empowering, and retaining top-tier talent dedicated to delivering exceptional results.

The Senior Transformation Architect - Cybersecurity is a senior client-facing advisor and technical leader who helps organizations improve security, resilience, connectivity, and operational performance through practical transformation roadmaps and executable architectures. The role partners with account managers, cybersecurity and networking practice leaders, delivery teams, and technology partners to understand client priorities, assess current environments, define target states, and develop outcome-based solutions across the full customer lifecycle.

The primary focus is secure network transformation across campus, branch, data center, cloud, hybrid, and remote-user environments. The architect will lead or support workshops, assessments, strategy engagements, technical briefings, solution designs, proposals, and transition-to-delivery activities. The successful candidate brings strong business acumen, executive presence, and hands-on knowledge of the security controls and network architectures required to enable modern, distributed enterprises.

• Lead client discovery and advisory conversations that translate business objectives, risk tolerance, regulatory obligations, and operating-model needs into cybersecurity and secure-network strategies.

• Plan and facilitate cybersecurity, network modernization, secure WAN, Zero Trust, SASE/SSE, firewall, network access control, cloud networking, and security-readiness workshops and assessments.

• Assess current-state WAN, LAN, campus, branch, data center, cloud, wireless, remote-access, identity, and security-control environments; identify gaps, technical debt, vulnerabilities, resiliency risks, and opportunities for modernization.

• Define target-state architectures, reference designs, roadmaps, migration plans, and prioritized recommendations for secure and resilient connectivity.

• Architect and position solutions involving SD-WAN and Secure WAN, Zero Trust Network Access, SASE/SSE, next-generation firewalls, secure remote access, NAC/AAA, identity-aware policy enforcement, network segmentation, microsegmentation, IDS/IPS, VPN, and secure wireless.

• Integrate network security with cloud, data center, endpoint, identity, security operations, and data-protection requirements to produce cohesive, defensible architectures rather than isolated point solutions.

• Develop solution concepts, bills of materials, statements of work, implementation approaches, pricing inputs, ROI/TCO narratives, and executive-ready proposals in collaboration with sales and delivery teams.

• Present technical briefings, architecture reviews, demonstrations, and transformation recommendations to CIO, CISO, CTO, infrastructure, network, security, and operations stakeholders.

• Qualify opportunities based on business value, technical fit, client decision process, funding, delivery readiness, and the potential for GDT to provide advisory, professional, lifecycle, and managed services.

• Create continuity from strategy through execution by documenting assumptions, risks, dependencies, acceptance criteria, governance, and handoff requirements for implementation and managed operations.

• Identify opportunities for managed network and managed security services, including monitoring, SIEM, behavioral analytics, threat intelligence, vulnerability management, server hardening, and intrusion detection/prevention.

• Build trusted relationships with clients and technology partners; coach account teams and mentor architects and engineers on secure-network transformation, consultative selling, and solution quality.

• Collaborate with practice leaders to refine offerings, playbooks, assessment methodologies, reference architectures, enablement materials, and repeatable delivery models.

• Track industry, threat, regulatory, cloud, networking, and cybersecurity trends and translate them into actionable client guidance and GDT service opportunities.

• Enterprise cybersecurity and network-security architecture experience spanning on-premises, hybrid, and cloud environments.

• Strong command of secure network design principles, including defense in depth, least privilege, identity as the new perimeter, policy-based access, segmentation, resiliency, high availability, and secure-by-design architecture.

• Demonstrated expertise with Zero Trust architectures and practical implementation patterns, including identity-aware access, ZTNA, NAC, MFA, AAA, device posture, continuous verification, and policy enforcement.

• Working knowledge of SASE, SSE, SD-WAN/Secure WAN, cloud networking, secure Internet breakout, application-aware routing, and remote-user access patterns.

• Strong knowledge of firewalls and network security controls, including NGFW policy design, URL filtering, malware/ransomware prevention, IDS/IPS, VPN, TLS inspection, logging, segmentation, and security-policy governance.

• Experience with network access control, identity and access management, directory and authentication services, privileged access concepts, and integration of security policy across users, devices, applications, and locations.

• Experience designing or assessing enterprise LAN, WAN, data center, campus, branch, wireless, IoT/OT-connected, and private LTE/5G environments with security and operational requirements in mind.

• Ability to perform or lead network vulnerability management, network security control, NAC, cloud-network, and broader cyber/network security assessments; prioritize findings by business risk and remediation effort.

• Understanding of security operations and managed-security models, including SIEM, threat intelligence, behavioral analytics, vulnerability management, incident detection/response, and operational handoff.

• Familiarity with cybersecurity and risk frameworks such as NIST Cybersecurity Framework, CIS Controls, ISO/IEC 27001, Zero Trust principles, and applicable privacy or regulatory requirements.

• Ability to develop current-state and target-state architecture documentation, network/security diagrams, roadmaps, migration strategies, technical requirements, and executive-level recommendations.

• Strong consulting, facilitation, presentation, written-communication, negotiation, and executive-storytelling skills; able to explain complex security and networking concepts in business terms.

• Proven ability to scope and position advisory, assessment, professional, lifecycle, and managed services, including the ability to connect technical recommendations to measurable outcomes, risk reduction, resilience, cost, and operational efficiency.

• Experience working across a multi-vendor ecosystem; exposure to Cisco, Palo Alto Networks, Fortinet, HPE Aruba Networking, HPE Juniper/Mist, and related security and networking technologies is strongly preferred.

• Ability to mentor team members, influence without direct authority, manage ambiguity, and collaborate effectively across sales, advisory, architecture, engineering, implementation, and managed-services teams.

Relevant certifications are valued and may include one or more of the following, or equivalent experience:

• Cisco CCNP Enterprise, CCNP Security, Cisco CyberOps, CCIE, or equivalent Cisco networking/security credentials.

• Palo Alto Networks PCNSA, PCNSE, or equivalent firewall and network-security certification.

• Fortinet professional or expert-level certifications, or equivalent Fortinet experience.

• Juniper JNCIS/JNCIP/JNCIE or security-focused Juniper credentials; HPE Aruba Networking or HPE Juniper/Mist certifications.

• ISC2 CISSP, CCSP, or related cybersecurity certification; CompTIA Security+ or equivalent foundational certification.

• TOGAF, SABSA, ITIL, or other enterprise architecture, service-management, or security-architecture certification.

• Clients see GDT as a trusted transformation partner capable of connecting cybersecurity, networking, cloud, data center, and managed-services decisions to business outcomes.

• GDT opportunities progress with clear scope, differentiated architecture, credible delivery assumptions, and a strong path from advisory work to implementation and lifecycle services.

• Recommendations improve security posture, visibility, resiliency, user and application experience, compliance readiness, and total cost of ownership without creating unnecessary operational complexity.

GDT IS AN EQUAL OPPORTUNITY EMPLOYER. Applicants and employees are considered for positions and are evaluated without regard to mental or physical disability, race, color, religion, gender, national origin, age, genetic information, military or veteran status, sex, marital status, gender identity or any other protected Federal, State/Province or Local status unrelated to the performance of the work involved.