Cybersecurity Architect

🔐 We’re Hiring: Cybersecurity Architect

📍 Doha, Qatar

We’re seeking a highly experienced Cybersecurity Architect to lead the design and governance of end-to-end security architecture across a large-scale, multi-cloud digital platform. If you’re passionate about building secure-by-design systems and driving security excellence across complex ecosystems, this opportunity is for you.

🔍 What You’ll Do

As a key security leader, you will define and enforce robust security frameworks across cloud, applications, and operations:

• Establish security reference architecture and baseline controls across cloud, Kubernetes, applications, and data
• Lead security governance including design reviews, threat modeling, and risk management
• Define identity and access strategies (RBAC, PIM/JIT, conditional access, secrets management)
• Design secure network architectures (segmentation, private endpoints, WAF, firewall policies)
• Drive application security standards (OWASP, secure SDLC, SAST/DAST, container security)
• Define data protection controls (encryption, key management, DLP, retention policies)
• Oversee security monitoring and SIEM/SOAR integrations (Defender for Cloud, Sentinel)
• Establish vulnerability management and patching processes with clear SLAs
• Ensure incident response readiness through runbooks, exercises, and forensic capabilities
• Provide assurance on vendor deliverables, including penetration testing and compliance readiness

🧠 What You Bring

• 8+ years of experience in cybersecurity architecture or engineering
• Deep expertise in cloud security, zero-trust architecture, and container/Kubernetes security
• Strong IAM and privileged access management experience
• Proven ability to translate compliance and risk requirements into technical controls
• Hands-on experience with SIEM, CSPM, and incident response frameworks
• Background in regulated industries (government, telco, finance, etc.) is highly valued

🛠 Tech Stack Highlights

Microsoft Defender for Cloud | Microsoft Sentinel | SOAR

Trivy/Anchore | OPA/Gatekeeper | Sigstore/Cosign

Azure Entra ID | Key Vault | PAM Tools