01
TRCI-26-04802
Zero Trust / SASE Network Security Architect (Contract)
Contract role in Frankfurt for a senior network security architect/engineer to design and implement Zero Trust Architecture (ZTA), ZTNA and SASE/SSE in a global enterprise. The role covers enterprise firewall architecture (Palo Alto/Fortinet/Cisco NGFW), segmentation and micro-segmentation across DC/campus/branch/cloud, routing/switching foundations (BGP/OSPF/EVPN/VXLAN/MPLS/VRF), and integration with IAM (Entra ID/AD/ISE), SIEM/EDR and ITSM (ServiceNow). You will lead architecture reviews, PoCs, migrations and security transformation initiatives, and produce HLD/LLD and operational documentation.
Position summary
- Location
- Germany
- Workplace
- Hybrid
- Employment
- Contract
- Experience
- Minimum 5 years and Maximum 7 years
Role overview
Why This Role Matters.
Contract role in Frankfurt for a senior network security architect/engineer to design and implement Zero Trust Architecture (ZTA), ZTNA and SASE/SSE in a global enterprise. The role covers enterprise firewall architecture (Palo Alto/Fortinet/Cisco NGFW), segmentation and micro-segmentation across DC/campus/branch/cloud, routing/switching foundations (BGP/OSPF/EVPN/VXLAN/MPLS/VRF), and integration with IAM (Entra ID/AD/ISE), SIEM/EDR and ITSM (ServiceNow). You will lead architecture reviews, PoCs, migrations and security transformation initiatives, and produce HLD/LLD and operational documentation.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Engineer and operate enterprise-grade security platforms including Palo Alto, Fortinet, and Cisco NGFW ecosystems.
03
Develop network segmentation and micro-segmentation strategies across data centers, campuses, branch locations, and cloud environments.
04
Lead architecture reviews, technical assessments, proof-of-concepts, migration strategies, and security transformation initiatives.
05
Collaborate with Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver secure and business-aligned solutions.
06
Create High-Level Designs (HLDs), Low-Level Designs (LLDs), operational procedures, and architecture documentation.
07
Implement centralized security management, policy governance, monitoring, logging, and reporting solutions.
08
Zero Trust Security Architecture
09
SASE / SSE / ZTNA
10
Network Segmentation & Identity-Based Access Controls
11
Enterprise Firewall Architecture
12
Cisco ASR, ISR, Catalyst 8K, Catalyst & Nexus Platforms
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Zero Trust
Required
02
ZTA
Required
03
ZTNA
Required
04
SASE
Required
05
SSE
Required
06
NGFW
Required
07
Palo Alto
Required
08
Fortinet
Required
09
Cisco
Required
10
Cisco ASR
Required
11
Cisco ISR
Required
12
Catalyst 8K
Required
13
Cisco Catalyst
Required
14
Cisco Nexus
Required
15
Arista
Required
16
BGP
Required
17
OSPF
Required
18
EVPN
Required
19
VXLAN
Required
20
MPLS
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Zero Trust Security Architecture (ZTA)
ZTNA
SASE / SSE
Network segmentation and micro-segmentation
Identity-based access controls
Enterprise firewall architecture and operations (Palo Alto, Fortinet, Cisco NGFW ecosystems)
Cisco routing/switching platforms (ASR, ISR, Catalyst 8K, Catalyst, Nexus)
Arista switching
Routing/overlay technologies: BGP, OSPF, EVPN, VXLAN
MPLS and VRF segmentation
VPN technologies including IPSec and TLS
NAC integration
Microsoft Entra ID (Azure AD)
Active Directory
Cisco ISE
EDR/XDR integration
SIEM integration
ServiceNow integration
Cloud security integration across Azure, AWS, and GCP
Troubleshooting and root cause analysis
Preferred
Nice to Have
Palo Alto Networks certification
Fortinet certification
CCNP Enterprise
CCNP Security
CCIE Enterprise Infrastructure
CCIE Security
CISSP
Experience in large-scale financial services environments
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Zero Trust / SASE Network Security Architect (Contract)
One page, about two minutes. We only ask for what we actually need to have a first conversation.