Design, Implementation, and Testing of a Zero-Trust Network Architecture for Financial Institution Compliance (PCI DSS & SOC 2)

We are seeking an expert DevOps engineer with a strong background in network security to design, implement, and thoroughly test a Zero-Trust Network Architecture (ZTNA) solution. The project will focus on achieving and maintaining compliance with PCI DSS and SOC 2 requirements for our financial institution. The ZTNA solution should encompass micro-segmentation, multi-factor authentication (MFA) integration across all critical assets and user access points, continuous monitoring with SIEM integration (Splunk preferred), and robust logging capabilities. The ideal candidate will possess experience integrating ZTNA principles within an existing AWS environment, utilizing services like VPCs, Security Groups, IAM roles and policies, and potentially leveraging third-party ZTNA solutions. This project involves a detailed risk assessment, gap analysis of our current infrastructure, architectural design documentation outlining the ZTNA implementation, configuration and deployment across various network segments (including cloud-hosted applications and on-premise servers), security testing including penetration testing, vulnerability scanning with remediation recommendations, documentation of operational procedures for ongoing maintenance and monitoring, and a comprehensive training plan for our IT staff. We require someone who can demonstrate experience with network segmentation, identity and access management (IAM), encryption technologies, and cloud security best practices. The project will require close collaboration with our internal IT teams (network, security, and application development) to ensure seamless integration and minimal disruption to existing operations. Post-implementation, ongoing support and fine tuning of the ZTNA solution will be required as part of this engagement. The goal is a resilient, secure and compliant network infrastructure.