Senior Security Architect📣 إعلان

About the Role

Acuative Middle East is seeking a Senior Security Architect to join their team in Makkah, specifically in Jeddah and Makkah. This full-time position requires 5-10 years of experience in cybersecurity, focusing on defining and advancing the organization's cybersecurity architecture across enterprise, cloud, network, and application environments.

Role Overview and Responsibilities

The Senior Security Architect will provide technical leadership in designing secure solutions, conducting architecture and design reviews, and driving strategic initiatives. This role involves close collaboration with Enterprise Architecture, Infrastructure, Cloud, Network, DevOps, Application Development, and Security Operations teams to ensure security-by-design principles are integrated throughout the technology lifecycle and that security risks are identified and mitigated.

• Develop and maintain the enterprise cybersecurity architecture strategy, principles, standards, and reference architectures.
• Define security architecture requirements for infrastructure, applications, cloud services, and business solutions.
• Lead security architecture reviews for infrastructure, cloud, network, and application projects, conducting secure design assessments and identifying architectural risks.
• Lead the development and implementation of the organization's Zero Trust Architecture strategy, designing identity-centric security models.
• Design enterprise network segmentation and micro-segmentation strategies, defining trust zones and security boundaries.
• Design secure cloud architectures across AWS, Azure, Google Cloud, and Oracle Cloud Infrastructure (OCI), and support DevSecOps initiatives.
• Translate business and regulatory requirements into technical security architecture requirements and support enterprise risk assessments.
• Provide expert guidance to engineering and project teams on secure architecture practices and mentor security engineers.
• Monitor emerging cybersecurity threats, technologies, and industry trends to continuously improve enterprise security architecture frameworks.

Required Qualifications and Experience

Candidates must possess a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline. The role requires 8+ years of experience in cybersecurity, with at least 5 years specifically in security architecture or solution architecture. Proven experience designing secure enterprise, cloud, and hybrid environments, along with strong experience leading architecture reviews and enterprise security initiatives within large-scale enterprise environments, is essential.

Technical Skills and Knowledge

• Security Architecture: Enterprise Security Architecture, Security-by-Design, Secure Solution Architecture, Threat Modeling, Security Reference Architectures, IAM, PAM, API Security, Data Security Architecture.
• Network & Zero Trust: Zero Trust Architecture (NIST SP 800-207), Network Segmentation, Micro-Segmentation, SDP, SDN, Next-Generation Firewalls, Secure Remote Access, NAC, DNS Security.
• Cloud Security: Microsoft Azure, AWS, OCI, GCP, Kubernetes Security, Container Security, Infrastructure as Code (Terraform, ARM, CloudFormation), DevSecOps, CI/CD Security.
• Security Technologies: SIEM, EDR/XDR, Identity Providers (Microsoft Entra ID, Okta, Ping Identity), Secrets Management, Vulnerability Management, DLP, PKI and Certificate Management.
• Knowledge Areas: NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-207, ISO/IEC 27001/27002, CIS Critical Security Controls, OWASP Top 10/ASVS, MITRE ATT&CK Framework, SSDLC, CSA CCM, TOGAF (preferred).

Preferred Certifications

Preferred certifications include CISSP (required or strongly preferred), CCSP, SABSA Foundation or Practitioner, TOGAF, GIAC Defensible Security Architecture (GDSA), Microsoft AZ-500, AWS Certified Security – Specialty, OCI Security Professional, and CRISC (preferred).