Cybersecurity Architect & Engineering Lead

Identity, Cloud, Network, and Endpoint Security

• Define requirements across IAM, PAM, SSO, MFA, federation, identity governance, directory services, RBAC, ABAC, and identity lifecycle management.
• Govern security architecture for public, private, and hybrid cloud, compute, storage, virtualization, containers, and platform services.
• Provide technical leadership across NGFW, WAF, IDS/IPS, NAC, VPN, segmentation, SASE/SSE, EDR/XDR, and endpoint protection.
• Support CSPM, CNAPP, CWPP, cloud IAM, workload security, and cloud-native monitoring capabilities.

Application, Data, and Monitoring Security

• Define security architecture for applications, APIs, middleware, integration platforms, microservices, CI/CD pipelines, and code repositories.
• Promote DevSecOps and Secure SDLC practices and support SAST, DAST, SCA, API security, secrets management, and dependency management.
• Define data protection requirements for classification, encryption, tokenization, key management, secure exchange, and data at rest and in transit.
• Integrate SIEM, SOAR, EDR/XDR, NDR, threat intelligence, vulnerability management, and cloud security platforms with monitoring and response.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Typically 15+ years of IT or cybersecurity experience with substantial architecture and engineering experience.
• Experience as a Cybersecurity Architect, Security Architect, Security Engineering Lead, Lead Security Architect, or equivalent.
• Experience designing security solutions in large-scale, complex enterprise technology environments.
• Strong knowledge of cloud, network, IAM/PAM, application and API, data, endpoint, monitoring, and vulnerability security.
• Experience with Azure, AWS, or equivalent cloud and hybrid security architectures.
• Experience in multi-vendor systems integration environments and technical security design governance.

Preferred Qualifications

• Experience delivering major cybersecurity initiatives in the UAE or wider GCC region.
• Knowledge of Zero Trust, SASE/SSE, CNAPP, CSPM, EDR/XDR, SIEM/SOAR, IAM/PAM, DevSecOps, and cloud-native security.
• Knowledge of NIST CSF, ISO/IEC 27001, CIS Controls, SABSA, MITRE ATT&CK, or TOGAF.
• Relevant certifications may include CISSP, CCSP, SABSA, CISM, GIAC, TOGAF, Microsoft Azure Security, or AWS Security.

Candidate Profile