Richemont Network Security Architect

About Richemont

Richemont is one of the world’s foremost luxury groups, stewarding a distinguished portfolio of maisons across jewellery, watchmaking, fashion and accessories, including Cartier, Van Cleef & Arpels, Jaeger-LeCoultre and Montblanc. As an employer, it combines the heritage of artisanal excellence with a forward-looking culture shaped by innovation, client-centricity and responsible business. Its global teams operate in an environment that values craftsmanship, entrepreneurship and collaboration, offering opportunities to grow within iconic maisons and group functions alike. Richemont attracts professionals who aspire to contribute to enduring luxury, preserving rare savoir-faire while helping define the future of high craftsmanship.

Role & Responsibilities

• Define and own reference architectures, standards and technology roadmaps for the global network across hybrid and multicloud environments.
• Balance security, resilience, performance and cost in collaboration with Cloud, Security, UC, Workplace and Platform teams, delivering scalable, durable designs.
• Embed security by design using Zero Trust principles, identity-based controls, device posture checks and least-privilege access.
• Evolve secure access architecture, including SASE, SSE and ZTNA, and strengthen network segmentation and access control against emerging threats.
• Design secure hybrid-cloud connectivity with controlled traffic flows and end-to-end encryption; own PKI strategy, including certificate and key lifecycle management.
• Engineer automated network change pipelines using Python, APIs and infrastructure-as-code frameworks such as Ansible and Terraform.
• Establish and maintain engineering foundations, including a trusted source of truth, Git-based peer review, CI/CD testing, drift detection and secure secrets management.
• Ensure every change has a controlled rollout plan and tested rollback.
• Define network and data boundaries for approved AI services, including private endpoints, controlled egress, identity-aware access and workload segmentation; collaborate with Cybersecurity on AI telemetry and data-loss prevention, and set guardrails for AI agents' access to tools and APIs.
• Assess AI-assisted network operations and AIOps for measurable real-world impact; validate AI-generated recommendations before production, protect sensitive configurations and secrets from unapproved models, and promote human-in-the-loop governance with approval gates, audit trails and safe rollback for AI-driven changes.
• Architect wired, wireless, WAN and cloud networks for failure and rapid recovery; use telemetry and capacity analysis to improve observability and prevent user-impacting problems.
• Lead complex incident investigations through validated recovery and turn incidents into learning opportunities for the wider team.

Qualifications

• Enterprise network architecture delivery, with hands-on routing, switching, Wi-Fi and troubleshooting; strong TCP/IP, BGP and OSPF; and WAN/VPN plus datacenter or software-defined networking experience.
• Practical network security and hybrid-cloud connectivity experience, including identity-based access, segmentation and resilient design, with sound judgment on risks and trade-offs.
• Hands-on Python/API automation using Ansible, Terraform or comparable tools, supported by version control, peer review, testing and safe delivery practices.
• Hands-on and architectural experience with Cisco ISE, including 802.1X, TACACS+/RADIUS, profiling, posture, guest access, policy design and segmentation models.
• Architecture leadership, clear documentation and cross-team collaboration.
• Fluent English.
• A bachelor’s degree or equivalent practical experience.
• AI security or AIOps experience is welcome but not required.
• Curiosity and disciplined learning; model-training experience is not required.
• Relevant certifications or equivalent practical experience are valued.
• Experience with comparable technologies and transferable judgment; the listed products do not all need to be mastered.

Skills

Education

Bachelor’s degree or equivalent practical experience.

Benefits

Competitive compensation and opportunities to grow.

Culture

Richemont fosters a refined, international workplace where its Maisons preserve exceptional craftsmanship while benefiting from the strength and perspective of a global luxury group. As an employer, it values long-term stewardship, collaboration, innovation, and the development of talent within an environment shaped by heritage, creativity, and high standards.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.