Infrastructure Security Architect

Welcome to the future of cloud networking and security!

Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeem, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028.

This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!

We're looking for an Infrastructure Security Architect to join us. In this role, you will design and validate secure cloud and corporate infrastructures, drive security best practices, and solve complex network and cloud-security challenges across the organization.

Responsibilities:

· Design and architect secure infrastructures across cloud, and corporate environments, with strong emphasis on scalable AWS networking.

· Lead network-security architecture reviews for new and existing technologies, systems, and product features.

· Develop and maintain security reference architectures, guidelines, and best practices for cloud and network environments.

· Review, design, and enhance cloud network architecture (VPC topology, segmentation, routing, connectivity, hardening).

· Evaluate and run PoCs for security and cloud-networking products to strengthen Cato’s cloud security posture.

· Perform Infra threat modeling and risk assessments for network and cloud architecture designs.

· Collaborate with DevOps, SRE, R&D, and IT to integrate security into infrastructure design, deployments, and engineering processes.

· Troubleshoot complex network and cloud-security issues across corporate and product environments.

· Oversee IoT network security, including segmentation and monitoring strategies.

· Provide clear, structured feedback to product teams on architecture, design trade-offs, and real-world operational impact.

· Act as a senior escalation point for network-related security alerts and incident response within the security operations team.

Requirements:

· 6+ years of hands-on experience in network security architecture, cloud network security, or related infrastructure/security roles.

· Strong expertise in AWS networking and cloud architecture: VPC design, routing, TGW, NACLs/SGs, multi-region patterns.

· Deep understanding of enterprise network architecture, segmentation, routing, firewalls, and secure network design principles.

· Proven experience performing architecture reviews, providing design recommendations, and influencing technical decision-making.

· Experience evaluating and implementing security tools, cloud security technologies, and PoCs in production environments.

· Strong familiarity with threat modeling, risk assessments, and secure design frameworks.

· Experience collaborating with R&D, DevOps, and IT teams in fast-paced product environments.

· Hands-on understanding of cloud-native security, identity/security controls, and modern network-security concepts (Zero Trust, IAM, secrets management, etc.).

· Ability to independently lead complex architecture initiatives end-to-end.

· Excellent communication skills, with the ability to translate complex technical risks into clear, actionable insights.

· Proactive mindset, strong analytical abilities, and passion for designing secure and scalable systems.