01
TRCI-26-06130
WAN & Perimeter Security Architect (Firewall/Zero Trust)
Contract role in Amsterdam for a senior WAN and perimeter security architect/SME to design and govern secure enterprise connectivity across MPLS, DIA, SD-WAN, cloud and third-party interconnects. The role owns firewall platforms and perimeter services, drives Zero Trust and segmentation strategies, designs secure internet access and remote access/VPN solutions, supports incident response and policy recertification, and advances Security-as-Code/Network-as-Code automation with integrations into SIEM/ITSM/CMDB and monitoring.
Position summary
- Location
- Netherlands
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 6 years and Maximum 8 years
Role overview
Why This Role Matters.
Contract role in Amsterdam for a senior WAN and perimeter security architect/SME to design and govern secure enterprise connectivity across MPLS, DIA, SD-WAN, cloud and third-party interconnects. The role owns firewall platforms and perimeter services, drives Zero Trust and segmentation strategies, designs secure internet access and remote access/VPN solutions, supports incident response and policy recertification, and advances Security-as-Code/Network-as-Code automation with integrations into SIEM/ITSM/CMDB and monitoring.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Design and govern secure WAN architectures supporting MPLS, DIA, SD-WAN, cloud connectivity, and third-party interconnections.
03
Define security standards and reference architectures for perimeter and edge security.
04
Design secure network connectivity between campuses, data centers, cloud providers, suppliers, and partner organizations.
05
Lead security assessments and design reviews for strategic connectivity initiatives.
06
Drive adoption of Zero Trust network principles across WAN and perimeter services.Perimeter Security & Firewall Services
07
Act as technical owner and subject matter expert for enterprise firewall platforms.
08
Design, implement, and maintain security policies across all perimeter security layers.
09
Lead firewall migration, modernization, and lifecycle management projects.
10
Ensure firewall rules are secure, auditable, and aligned with business requirements.Secure Internet Access
11
Design and manage secure internet access architectures.
12
Support secure access strategies for office, remote, and hybrid work environments.Remote Access & VPN Security
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
WAN security
Required
02
MPLS
Required
03
DIA
Required
04
SD-WAN
Required
05
cloud connectivity
Required
06
perimeter security
Required
07
edge security
Required
08
enterprise firewall
Required
09
firewall policy
Required
10
network segmentation
Required
11
east-west traffic
Required
12
north-south traffic
Required
13
Zero Trust
Required
14
Secure Internet Access
Required
15
URL filtering
Required
16
SSL/TLS inspection
Required
17
malware protection
Required
18
Secure Web Gateway
Required
19
internet breakout
Required
20
remote access
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
WAN security architecture and design (MPLS, DIA, SD-WAN, cloud connectivity, third-party interconnects)
Perimeter/edge security architecture and reference standards
Enterprise firewall platform ownership and firewall policy design/implementation
Firewall lifecycle management (migration, modernization, rule governance, auditability)
Network segmentation and traffic control (east-west and north-south)
Zero Trust network principles applied to WAN/perimeter
Secure Internet Access controls (URL filtering, SSL/TLS inspection, malware protection, Secure Web Gateway, internet breakout security)
Remote access and VPN security (IPsec VPN, SSL VPN, site-to-site VPN, partner connectivity)
Security operations support: incident escalation, investigations, root cause analysis
Firewall policy reviews/recertification and support to vulnerability/threat remediation
Automation: Security-as-Code/Network-as-Code for policy deployment/validation/compliance reporting
Integration with monitoring, CMDB, SIEM, and ITSM tooling
Preferred
Nice to Have
Application-aware policy enforcement
Security zoning concepts for hybrid environments
Workload segmentation initiatives (data center/cloud)
Compliance reporting automation and continuous improvement mindset
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for WAN & Perimeter Security Architect (Firewall/Zero Trust)
One page, about two minutes. We only ask for what we actually need to have a first conversation.