Design and Implement Zero-Trust Network Architecture with Advanced Threat Detection for Financial Institution

We are seeking an expert to design and implement a robust Zero-Trust Network Architecture for our financial institution. The project involves a comprehensive assessment of our existing network infrastructure, identifying vulnerabilities and developing a detailed plan for implementing Zero-Trust principles. This includes segmenting the network, enforcing micro-segmentation policies, deploying multi-factor authentication (MFA) across all critical systems, and integrating advanced threat detection capabilities like intrusion prevention systems (IPS) and security information and event management (SIEM) solutions. The ideal candidate will have extensive experience with network segmentation, identity and access management (IAM), endpoint detection and response (EDR) tools, and cloud security best practices. They will be responsible for configuring network firewalls (both hardware and software), implementing VPN solutions, conducting penetration testing to validate the effectiveness of the Zero-Trust architecture, and providing ongoing support and maintenance. Documentation is a critical deliverable, including detailed network diagrams, security policies, and operational procedures. Experience with financial regulations (e.g., PCI DSS) is highly desirable. We require a solution that balances enhanced security with minimal disruption to business operations, prioritizing user experience and seamless integration with existing IT systems. The project will involve close collaboration with our internal security team, infrastructure engineers, and compliance officers to ensure alignment with organizational goals and regulatory requirements. Regular progress updates and detailed reports are expected throughout the project lifecycle.