Role & Responsibilities:

- Design and implement enterprise network security architecture aligned with business requirements, security standards, and regulatory compliance.

- Develop security architecture frameworks covering network segmentation, Zero Trust, secure connectivity, cloud security, and threat protection.

- Lead the design, deployment, and optimization of security solutions including:

1. Next-generation firewalls (Palo Alto, Fortinet, Cisco Firepower, Check Point)

2. IDS/IPS solutions

3. Secure Web Gateways (SWG)

4. VPN and remote access solutions

5. NAC solutions

6. DDoS protection

7. Network Detection & Response (NDR)

- Define and enforce security architecture standards, policies, and best practices across enterprise environments.

- Perform security reviews and architecture assessments for new applications, infrastructure changes, and technology initiatives.

- Design secure network solutions across:

1. Data centers

2. Cloud platforms (AWS/Azure/GCP)

3. Hybrid environments

4. Branch and remote offices

- Collaborate with enterprise architects, infrastructure teams, SOC teams, application teams, and business stakeholders to deliver secure solutions.

- Conduct risk assessments, threat modeling, and security gap analysis to identify vulnerabilities and recommend remediation strategies.

- Develop high-level and low-level security design documents (HLD/LLD), architecture diagrams, and implementation roadmaps.

- Support security operations teams in incident investigations, root cause analysis, and improvement of security controls.

- Provide technical leadership for major security transformation initiatives and enterprise security programs.

- Evaluate emerging cybersecurity technologies and recommend improvements to enhance security posture.

- Ensure compliance with industry standards and frameworks such as:

1. ISO 27001

2. NIST Cybersecurity Framework

3. CIS Controls

4. PCI-DSS

5. UAE regulatory security requirements

- Mentor security engineers and provide technical guidance on complex security implementations.

- Participate in security audits, penetration testing reviews, and compliance assessments.

Preferred Candidate Profile:

Experience:

- 815 years of experience in network security, cybersecurity architecture, or enterprise security engineering roles.

- Proven experience designing and implementing security architectures for large enterprise environments.

- Experience working with multinational organizations, banking, telecom, government, or critical infrastructure environments preferred.

- Strong experience in security architecture design, network engineering, and security transformation projects.

Network Security:

- Strong knowledge of TCP/IP, routing, switching, VLANs, VPNs, DNS, DHCP, BGP, MPLS, SD-WAN.

- Hands-on expertise with enterprise firewall technologies:

1. Palo Alto Networks

2. Fortinet FortiGate

3. Cisco ASA/Firepower

4. Check Point

- Experience with firewall architecture, policy design, rule optimization, and migration projects.

Cybersecurity Architecture:

- Strong understanding of:

1. Zero Trust Architecture

2. Defense-in-depth security models

3. Network segmentation

4. Identity-centric security

5. Threat modeling

6. Secure architecture principles

Cloud Security:

- Experience designing security controls for:

1. Microsoft Azure

2. AWS

3. Google Cloud Platform

- Knowledge of cloud security services, IAM, security groups, WAF, CSPM, and workload protection.

Security Operations & Monitoring:

- Understanding of:

1. SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, ArcSight)

2. SOAR solutions

3. Threat intelligence

4. Incident response processes

Education:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline.

- Master's degree or specialized cybersecurity qualifications are an advantage.