Network & Infrastructure Security Architect

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.
To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

The Network & Infrastructure Security Architect at BAT is responsible for defining and governing the security architecture for the organization’s network and infrastructure environments, ensuring secure connectivity, resilient infrastructure, and protected enterprise services across global operations.

This role designs security architecture covering enterprise networking, remote access, secure connectivity, infrastructure platforms, and zero-trust network access using technologies including Cisco, Meraki, Zscaler, and Microsoft security capabilities.

The Architect works closely with infrastructure, cloud, workplace, and security teams. They ensure network and infrastructure services are securely built, follow regulatory requirements, and align with enterprise security strategy.  

Your key responsibilities will include:

• Define enterprise network security architecture, including build principles, standards (firewall, proxy, protection), and secure build patterns for global and hybrid environments.  
• Develop secure network segmentation and micro-segmentation strategies, along with traffic control for both IT and OT networks.  
• Architect secure connectivity across corporate sites, factories, data centers, cloud platforms, and remote users.
• Develop zero-trust and secure access strategies, including remote access, SSE/SASE architectures (e.g., Zscaler, Cisco, Microsoft), and user/device trust enforcement aligned with identity and endpoint security.
• Establish infrastructure and platform security architecture covering servers, virtualization, core services, hardening standards, secure administration, and logging/monitoring requirements.
• Design security controls for data centers and edge environments, including WAN/SD-WAN/branch connectivity and resilience/availability requirements for critical infrastructure.
• Conduct risk management and governance activities, including risk assessments, policy and standard definition, regulatory compliance, and audit support.
• Lead strategy and oversight by defining the security roadmap, guiding transformation initiatives, mentoring teams, promoting security-by-design, and addressing emerging threats.

What are we looking for?

• Requires 5+ years in a similar role and 10+ years overall in cybersecurity. Define and implement enterprise network security architecture, including design principles, segmentation/micro-segmentation, traffic control, firewall/proxy standards, and secure design patterns across global and hybrid environments.
• Architect secure connectivity across IT and OT networks, covering corporate sites, factories, data centers, cloud environments, and remote users.
• Design and implement secure access and zero-trust strategies, including remote access, SSE/SASE architectures (e.g., Zscaler, Cisco, Microsoft), and enforcement of user/device trust aligned with identity and endpoint security.
• Establish infrastructure and platform security, including secure architecture for servers, virtualization, and core services, with hardening standards, administrative controls, and logging/monitoring requirements.
• Design data center and edge security, including controls for on-premises, WAN/SD-WAN/branch connectivity (e.g., Cisco, Meraki), and resilience and availability requirements for critical systems.
• Lead risk management and governance, including architectural risk assessments, defining standards/policies/reference architectures, ensuring regulatory and data protection compliance, and supporting audits
• Drive strategy and leadership by defining the security roadmap, coordinating transformation initiatives, mentoring teams, promoting security-by-design, and addressing emerging threats.
• Possess strong qualifications and skills, including deep expertise in network/security technologies (Cisco, Meraki, Zscaler, Microsoft), zero-trust and hybrid architectures, knowledge of frameworks (NIST, ISO, CIS), collaborator engagement, and preferred credentials (Master’s degree, CISSP/CCSP), with experience in global, supervised, and multi-functional environments.  

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).

Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.