Security Architect

Role Overview

As a Security Architect based in Doha, Qatar, you will be responsible for designing, implementing, and managing robust security frameworks that protect our enterprise infrastructure. Your expertise will be essential in securing firewalls, network environments, cloud integrations, and supporting incident response efforts while aligning security strategies with business objectives.

Main Duties

• Lead the design and deployment of firewall and threat protection solutions, including FortiGate, Palo Alto, Cisco ASA5500, F5 BIG-IP ASM, HP Tipping Point IPS, FireEye APT, and BlueCoat Proxy systems.
• Develop secure network architectures encompassing VPN solutions such as Cisco AnyConnect, ACS/ISE authentication systems, DNS security measures, and establishing enterprise network segmentation.
• Design comprehensive information security frameworks applying cryptographic methodologies like DES and RSA and incorporating risk management principles.
• Integrate and secure cloud platforms specifically Azure and Google Cloud Platform within the security architecture, ensuring compliance and operational resilience.
• Align security initiatives with the organization’s strategic goals, ensuring a balance between minimizing risks and maintaining operational efficiency.
• Support incident response processes and governance through architectural involvement, facilitating audits and compliance adherence.
• Maintain and update documentation of security architectures, policies, and procedures to uphold standards and support governance.
• Provide mentorship and leadership to security engineers, review technical designs, and promote adherence to best practices.

Candidate Requirements

• Possess a Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Bring a minimum of 10 years of experience in IT and cybersecurity architecture roles.
• Demonstrate extensive knowledge of enterprise security frameworks and cloud security principles.

Certifications

• Professional certifications such as Fortinet NSE, Palo Alto PCNSE, F5 ASM, Azure Security, Cisco ASA, FireEye APT, HP Tipping Point IPS, and BlueCoat Proxy are required.
• CCIE Security certification is preferred.