Cyber Security Architect📣 Job Ad

About the Role

NourNet is seeking an experienced Cyber Security Architect to join its cybersecurity and enterprise architecture function. This is a fully on-site, full-time role based in Riyadh, Saudi Arabia, dedicated to supporting secure-by-design governance across cloud and on-premises environments. The Cyber Security Architect will be instrumental in ensuring that all technology projects and platforms adhere to approved security architecture standards, secure-by-design principles, and relevant regulatory requirements. The position requires deep expertise in cloud security patterns, conducting secure design reviews, and maintaining enterprise-grade architecture governance.

Key Responsibilities

• Conduct comprehensive security architecture assessments for new projects, significant system changes, and cloud deployments, including OCI, microservices, APIs, and data platforms.
• Develop, maintain, and evolve enterprise security design patterns and reference architectures covering network segmentation, Identity and Access Management (IAM), encryption, API security, and data protection strategies.
• Define and implement secure configurations for Oracle Cloud Infrastructure (OCI) services, including identity models, network security groups, encryption protocols, and key management solutions.
• Integrate security controls into DevOps and CI/CD pipelines, incorporating Static Application Security Testing (SAST), dependency scanning, container security best practices, and Infrastructure as Code (IaC) validation.
• Support the evaluation and selection of new security technologies, ensuring their architectural alignment with current and future enterprise security strategies.
• Collaborate with Security Operations Center (SOC), Governance, Risk, and Compliance (GRC), and Enterprise Architecture teams to embed necessary monitoring and governance requirements into solution designs from the outset.
• Actively participate in architecture review boards, meticulously documenting decisions, identified risks, and required design adjustments for security compliance.
• Produce high-quality documentation, including detailed architecture review reports, clear architectural diagrams, and well-reasoned design rationales.

Qualifications and Experience

• A minimum of 7 years of progressive experience in security architecture, with a strong focus on secure-by-design reviews and the application of enterprise security frameworks.
• Demonstrated strong expertise in cloud security, with a preference for Oracle Cloud Infrastructure (OCI), and a solid understanding of microservices, API security, and data protection mechanisms.
• In-depth knowledge of network segmentation strategies, Identity and Access Management (IAM) principles, encryption techniques, and the secure integration of third-party services.
• Proven experience in integrating security practices and controls into DevOps and CI/CD pipelines.
• A strong discipline in documentation and architectural governance is essential for this role.

Required Skills

• Security Architecture
• Secure-by-Design Principles
• Cloud Security (OCI, AWS, Azure)
• Enterprise Architecture
• Microservices Architecture
• API Security
• Data Platforms Security
• Identity and Access Management (IAM)
• Encryption and Data Protection
• DevSecOps and CI/CD Integration
• SAST (Static Application Security Testing)
• Container Security
• IaC (Infrastructure as Code) Validation
• Network Segmentation
• Architecture Frameworks (SABSA, TOGAF)
• Cloud Security Certifications (CCSK, CCSP)

Work Environment and Location

This role requires a full on-site presence in Riyadh, Saudi Arabia, due to the critical nature of architecture governance and secure-by-design processes. The position is full-time.