Security Baselines Architect

About the Role

Hays is seeking an experienced Security Baselines Architect to join a major cybersecurity architecture and governance program. This contract position is based in Riyadh, Saudi Arabia, and involves working within a highly regulated enterprise environment. The role focuses on enhancing the organization's security posture through secure configuration management and continuous security improvement.

Role Purpose and Context

The Security Baselines Architect will be responsible for developing, maintaining, and enforcing Minimum Security Baselines (MSBs), system hardening standards, and configuration compliance controls. This scope covers enterprise infrastructure, cloud platforms, databases, operating systems, and security technologies, playing a critical part in compliance monitoring and security posture improvement.

Key Responsibilities

• Develop and maintain enterprise Minimum Security Baselines (MSBs) and hardening standards.
• Define secure configuration standards for Windows Servers and Workstations, Linux Operating Systems, Network Devices (Firewalls, Routers, Switches), Databases, Cloud Platforms, and Security Technologies.
• Establish and maintain security hardening requirements aligned with industry best practices.
• Perform baseline gap assessments and configuration reviews across enterprise environments.
• Conduct configuration compliance assessments and identify deviations from approved baselines.
• Monitor configuration drift and coordinate remediation activities with technical teams.
• Review system and platform configurations against security standards and approved baselines.
• Leverage CIS Benchmarks, DISA STIGs, and vendor security configuration guidelines to define security requirements.
• Collaborate with infrastructure, cloud, network, security, and architecture teams to implement secure configurations.
• Support security audits, compliance initiatives, and cybersecurity assessments.
• Develop documentation, guidelines, and procedures related to enterprise hardening standards.
• Contribute to security architecture reviews and cybersecurity governance activities.

Qualifications and Experience

• Candidates should possess 5-10 years of relevant experience in security architecture and governance.
• Demonstrated experience in developing and enforcing security baselines and hardening standards.
• Familiarity with highly regulated enterprise environments is required.

Work Type and Location

This is a contract position located in Riyadh, Saudi Arabia. The role requires on-site presence to support a major cybersecurity architecture and governance program.