assistant/ associate professor - cybersecurity

data & analytics architect

interior design architect

platform / cloud architect

solution & app architect

assistant/ associate professor - cybersecurity Jobs in Qatar

cybersecurity architect

Starlink Qatar

<div>
 
 We are seeking a
 
 Cybersecurity Architect
 
 to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
 
 secure-by-design implementation
 
 across cloud-agnostic deployments.
 
 
 You will establish security standards, reference architectures, and assurance processes covering
 
 identity, network segmentation, application security, data protection, and operational security monitoring
 
 . Working with stakeholders, vendors, and operations teams, the architect drives
 
 threat modeling, security controls validation, and compliance evidence readiness
 
 , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define
 
 security reference architecture and baseline controls
 
 for cloud, Kubernetes, applications, and data services.
 </li>
 <li>
 Lead
 
 security governance
 
 : design reviews, threat modeling, security exceptions, and risk acceptance processes.
 </li>
 <li>
 Define
 
 identity and access controls
 
 (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
 </li>
 <li>
 Design
 
 network security architecture
 
 (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
 </li>
 <li>
 Establish
 
 application security standards
 
 (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
 </li>
 <li>
 Define
 
 data security controls
 
 (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
 </li>
 <li>
 Own
 
 security monitoring requirements and integrations
 
 : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
 </li>
 <li>
 Define
 
 vulnerability management and patching processes
 
 for OS/Kubernetes/runtime components, including SLA targets and reporting.
 </li>
 <li>
 Support
 
 incident response readiness
 
 : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
 </li>
 <li>
 Provide
 
 assurance of vendor deliverables and go-live readiness
 
 (pen test coordination, remediation validation, compliance evidence packs).
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Deep understanding of
 
 cloud security architecture, zero-trust networking, and Kubernetes/container security
 
 .
 </li>
 <li>
 Strong capability in
 
 IAM design and privileged access governance
 
 in regulated environments.
 </li>
 <li>
 Ability to translate
 
 risk and compliance requirements into practical technical controls and acceptance criteria
 
 .
 </li>
 <li>
 Experience implementing
 
 security monitoring, detection engineering, and incident response processes
 
 .
 </li>
 <li>
 Strong
 
 stakeholder influence
 
 and ability to enforce standards across multiple vendors and teams.
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in
 
 Computer Science, Information Technology, Cybersecurity
 
 ; Master&rsquo;s degree highly preferred.
 </li>
 <li>
 
 8+ years
 
 in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
 </li>
 <li>
 Hands-on experience securing
 
 Azure and at least one other cloud
 
 (GCP/AWS), including hybrid connectivity and shared responsibility.
 </li>
 <li>
 Proven experience with
 
 SIEM
 
 (Microsoft Sentinel preferred) and
 
 CSPM/CWPP
 
 (Defender for Cloud preferred).
 </li>
 <li>
 Experience with
 
 secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
 
 .
 </li>
 <li>
 Relevant certifications preferred:
 
 CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
 
 .
 </li>
 </ul>
 
 
 
 
 
 Preferred Tools
 
 
 <ul>
 <li>
 
 Security posture &amp; SIEM:
 
 Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
 </li>
 <li>
 
 Container/Kubernetes security:
 
 image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
 </li>
 <li>
 
 Identity &amp; secrets:
 
 Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
 </li>
 </ul>
 
 
 
 
 
 Soft Skills
 
 
 <ul>
 <li>
 Risk-based
 
 decision-making
 
 and ability to articulate trade-offs clearly
 </li>
 <li>
 Strong facilitation of
 
 threat modeling and security design reviews
 
 </li>
 <li>
 Clear, structured
 
 documentation and compliance evidence mindset
 
 </li>
 <li>
 Calm, decisive leadership during
 
 incidents and high-pressure situations
 
 </li>
 <li>
 
 Collaborative approach
 
 that enables delivery while maintaining security standards
 </li>
 </ul>
</div>

Cybersecurity Architect

PROZ TECHNOLOGIES

JOB DESCRIPTIONThe Cybersecurity Architect defines and governs the end-to-end security architecture for TASMU Platform 2.0 and its vendor-delivered capabilities, ensuring secure-by-design implementation across cloud-agnostic deployments. The role establishes security standards, reference architectures, and assurance processes covering identity, network segmentation, application security, data protection, and operational security monitoring. Working with MCIT, Ooredoo, vendors, and TASMU operations, the architect drives threat modeling, security controls validation, and compliance evidence readiness, including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and across Azure and any connected clouds.DUTIES &amp; RESPONSIBILITIES<ul><li>Define TASMU 2.0 security reference architecture and baseline controls for cloud, Kubernetes, applications, and data services.</li><li>Lead security governance: security design reviews, threat modeling, security exceptions, and risk acceptance processes.</li><li>Define identity and access controls (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).</li><li>Design network security architecture (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).</li><li>Establish application security standards (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).</li><li>Define data security controls (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).</li><li>Own security monitoring requirements and integrations: Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.</li><li>Define vulnerability management and patching processes for OS/K8s/runtime components, including SLA targets and reporting.</li><li>Support incident response readiness: runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.</li><li>Provide assurance of vendor deliverables and go-live readiness (pen test coordination, remediation validation, compliance evidence packs).</li></ul>SKILLS &amp; ABILITIES<ul><li>Deep understanding of cloud security architecture, zero-trust networking, and Kubernetes/container security.</li><li>Strong capability in IAM design and privileged access governance in regulated environments.</li><li>Ability to translate risk and compliance requirements into practical technical controls and acceptance criteria.</li><li>Experience implementing security monitoring, detection engineering, and incident response processes.</li><li>Strong stakeholder influence and ability to enforce standards across multiple vendors and teams.</li></ul>POTENTIAL BACKGROUND<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, a Master&rsquo;s degree is highly preferred</li><li>8+ years in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.</li><li>Hands-on experience securing Azure and at least one other cloud (GCP/AWS), including hybrid connectivity and shared responsibility.</li><li>Proven experience with SIEM (Microsoft Sentinel preferred) and CSPM/CWPP (Defender for Cloud preferred).</li><li>Experience with secure SDLC, vulnerability management, penetration testing coordination, and remediation programs.</li><li>Relevant certifications preferred (CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness).</li></ul>PREFERRED TOOLS / SOFT SKILLSPreferred tools:<ul><li>Security posture &amp; SIEM: Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks</li><li>Container/K8s security: image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools</li><li>Identity &amp; secrets: Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling</li></ul>Soft skills:<ul><li>Risk-based decision-making and ability to articulate trade-offs clearly</li><li>Strong facilitation of threat modeling and security design reviews</li><li>Clear, structured documentation and compliance evidence mindset</li><li>Calm, decisive leadership during incidents and high-pressure situations</li><li>Collaborative approach that enables delivery while maintaining security standards</li></ul>Job Type: PermanentPay: Up to QAR20,000.00 per month

Al Adyat consultancy

Job Profile: Cloud Infrastructure ArchitectJob Overview:The Cloud Infrastructure Architect is responsible for designing and overseeing the deployment of scalable, secure, and high-performance infrastructure to support the implementation of Plant Data Model (PDM) system. This role focuses on hybrid architecture with a strong emphasis on Microsoft technologies, including Azure, Microsoft 365, Intune, and Power Platform.The architect will evaluate infrastructure proposals submitted by implementation partners, ensure alignment with enterprise architecture and cybersecurity standards, and supervise the setup and integration of cloud and on-premises components. The role requires deep technical expertise in cloud infrastructure, virtualization, disaster recovery, and enterprise-grade networking, with proven experience in oil and gas environments.Key Responsibilities:<ul><li>Evaluate the PDM project infrastructure-related components of bidder proposals, ensuring alignment with enterprise architecture, cybersecurity standards, and operational requirements.</li><li>Lead the implementation of hybrid cloud infrastructure to support the PDM solution, with a focus on Microsoft technologies including Azure, Microsoft 365, Intune, and Power Platform in collaboration with implementation partners.</li><li>Lead the deployment and configuration of virtual machines, storage systems, networking components, and backup solutions across on-premises and cloud environments.</li><li>Ensure seamless integration of infrastructure with Active Directory, DNS, SCCM, Intune, and other enterprise services.</li><li>Oversee disaster recovery planning and high availability setup for PDM, ensuring compliance with existing DR architecture and recovery objectives.</li><li>Monitor infrastructure performance across distributed sites (e.g., Ras Laffan, Taweelah, Abu Dhabi), optimizing for latency, bandwidth, and system responsiveness.</li><li>Collaborate with system integration experts to ensure infrastructure readiness for middleware, APIs, and real-time data systems.</li><li>Enforce security protocols including encryption, role-based access controls, and secure remote access via ZTNA and MFA.</li><li>Support infrastructure scalability planning, capacity assessments, and hardware provisioning in coordination with approved vendors.</li><li>Maintain detailed documentation of infrastructure architecture, deployment plans, and operational procedures.</li><li>Provide technical oversight during implementation, testing, and go-live phases, ensuring infrastructure stability and compliance.</li></ul>Required Qualifications:Educational Background:<ul><li>A degree in computer science, Computer Engineering, information technology, or a related field</li></ul>Certifications (Preferred)<ul><li>Microsoft Certified: Azure Solutions Architect Expert</li><li>Certified Kubernetes Administrator (CKA)</li><li>TOGAF or similar enterprise architecture framework</li></ul>Expected Experience<ul><li>Minimum: 7&ndash;10 years of experience in IT infrastructure and cloud architecture</li><li>Preferred: Experience leading or supporting cloud/hybrid deployments for industrial platforms (e.g., AVEVA, Hexagon, Siemens, Bentley)</li></ul>Technical Skills<ul><li>Deep expertise in Microsoft Azure services including Virtual Machines, Azure Active Directory, Azure Storage, Azure Networking, and Azure Monitor.</li><li>Experience with Microsoft 365, Intune, and Power Platform for enterprise productivity, device management, and workflow automation.</li><li>Strong understanding of hybrid cloud architecture, including integration between on-premises infrastructure and cloud services.</li><li>Experience with Docker, Kubernetes, and Azure Kubernetes Service (AKS) for deploying and managing containerized applications in hybrid environments</li><li>Advanced knowledge of Azure Virtual Network (VNet) design, ExpressRoute, VPN gateways, DNS, load balancing, and secure network segmentation.</li></ul>Soft Skills:<ul><li>Excellent analytical and research skills.</li><li>Strong communication skills to collaborate with cross-functional teams.</li><li>Strong presentation skills</li></ul>Job Type: Full-timePay: From QAR15,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>IT infrastructure and cloud architecture: 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science, Computer Engineering (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>

Cloud Infrastructure Architect

malomatia

<div>
 
 Role Summary
 
 
 
 
 
 You will lead the security architecture, governance, and assurance of our AI and GenAI platforms across the organization. This includes classical ML systems and modern LLM/agentic architectures. You will define how models are designed, deployed, monitored, and defended; ensure they are robust, explainable, privacy-preserving, and compliant; and act as the go-to expert for AI security across products, data, cloud, and security teams.
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 &bull;AI Security Architecture
 
 
 oDesign and review secure architectures for ML/LLM workloads (training, fine-tuning, inference, RAG, agents, plugins, tool calling, APIs).
 
 
 oDefine reference architectures for on-prem, hybrid, and cloud AI platforms (Azure OpenAI, AWS Bedrock, GCP Vertex, self-hosted models, etc.).
 
 
 &bull;Threat Modeling &amp; Risk Management
 
 
 oPerform AI-specific threat modeling (e.g., data poisoning, model theft, prompt injection, jailbreaks, supply-chain, inference attacks) using MAESTRO or similar framework.
 
 
 oAlign controls with leading frameworks: NIST AI RMF, ISO/IEC 27001, ISO/IEC 27090, ISO/IEC 42001, OWASP GenAI / LLM Top 10, CSA &amp; MITRE ATLAS.
 
 
 &bull;Security Control Design &amp; Implementation
 
 
 oDefine and oversee implementation of controls for:
 
 
 &squf;Training &amp; data pipelines (data quality, provenance, labeling, PII protection).
 
 
 &squf;Model &amp; artifact integrity (signing, SBOM, secure registries).
 
 
 &squf;Access control, isolation, rate limiting, and abuse detection.
 
 
 &squf;Secure prompt engineering and guardrail policies.
 
 
 &squf;Security prompt monitoring to detect ongoing attacks.
 
 
 &squf;Data security: data classification, data masking and DLP.
 
 
 &squf;MCP server hardening.
 
 
 &bull;Reliability &amp; Trustworthiness
 
 
 oPartner with engineering and data science to embed robustness, observability, fallback strategies, and evaluation pipelines (safety, bias, toxicity, hallucination monitoring).
 
 
 oContribute to SLOs/SLAs for AI systems, including security and reliability KPIs.
 
 
 &bull;Secure SDLC for AI
 
 
 ombed AI security into CI/CD: scanning, dependency checks, policy-as-code, red-teaming AI components pre- and post-release.
 
 
 &bull;Incident Response &amp; Red Teaming
 
 
 oLLM bias detection.
 
 
 oPerform red teaming activities to abuse and force AI hallucinations.
 
 
 oDevelop and maintain AI-specific playbooks (prompt abuse, model exfiltration, data leakage, compromised agents).
 
 
 oLead or support AI red/blue/purple teaming exercises using frameworks like MITRE ATLAS.
 
 
 &bull;Governance, Compliance &amp; Policy
 
 
 oAdvice on alignment with emerging AI regulations and standards (e.g., EU AI Act, regional laws, internal AI use policies).
 
 
 oDefine internal policies on responsible AI, data usage, model lifecycle, and 3rd-party AI risk management.
 
 
 &bull;Stakeholder Leadership
 
 
 oRun workshops, training, and awareness for engineering, security, and business teams.
 
 
 
 
 
 Required Qualifications &amp; Experience
 
 
 
 
 
 &bull;8&ndash;12+ years in Cybersecurity, with 3&ndash;5+ years focused on AI/ML or data platforms (can be overlapping).
 
 
 &bull;Hands-on experience with:
 
 
 oCloud platforms (Azure, AWS, GCP) and their AI services.
 
 
 oAt least one Agentic/GenAI stack (e.g., Transformers, LangChain/LlamaIndex, vector DBs, model gateways, MLOps platforms).
 
 
 &bull;Proven track record designing or reviewing secure architectures for:
 
 
 ML pipelines, LLM/RAG systems, or agentic/automation platforms.
 
 
 &bull;Strong understanding of:
 
 
 oCryptography, identity &amp; access management, network &amp; app security.
 
 
 oData protection &amp; privacy (PII, PHI, DPIA concepts).
 
 
 &bull;Experience working with or mapping to frameworks/standards such as:
 
 
 oNIST AI RMF, ISO/IEC 27001, ISO/IEC 42001, SOC 2, OWASP Top 10 &amp; OWASP GenAI/LLM Top 10, MITRE ATT&amp;CK/ATLAS, CSA guidance.
 
 
 &bull;Excellent communication skills: able to translate complex AI risks into clear business and technical requirements.
 
 
 Core Technical &amp; Domain Skills
 
 
 &bull;AI/ML &amp; GenAI fundamentals:
 
 
 oModel types (LLMs, encoders, diffusion, classical ML), training/inference flows.
 
 
 oData pipelines, feature stores, embeddings, vector databases.
 
 
 &bull;AI Penetration testing:
 
 
 oPrompt injection, model tampering, data poisoning, output manipulation, exfiltration, shadow AI, insecure plugins/integrations.
 
 
 &bull;Platform &amp; Infra:
 
 
 o Kubernetes, containers, API gateways, secrets management, zero trust.
 
 
 &bull;Observability:
 
 
 o Logging, tracing, safety &amp; quality metrics for AI systems.
 
 
 o Health and latency monitoring.
 
 
 &bull;Strong scripting/automation (Python preferred) for security tooling and assessments.
 
 
 Certifications &amp; Training (Required / Highly Desirable)
 
 
 
 
 
 Essential:
 
 
 
 
 
 &bull; One or more core security certifications:
 
 
 o CISSP, CISM, CCSP, ISO 27001 Lead Implementer/Lead Auditor.
 
 
 &bull;One or more cloud security certifications:
 
 
 oCCSK (Cloud Security Alliance), AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer.
 
 
 &bull;AI &amp; AI Security&ndash;specific training / certs (or commitment to obtain within 6&ndash;12 months):
 
 
 oNIST AI RMF or ISO/IEC 42001-focused training.
 
 
 oCertified AI Security Professional (CAISP / similar offerings that cover LLM/GenAI threats, MITRE ATLAS, OWASP LLM Top 10).
 
 
 oOffSec / similar LLM &amp; AI Red Teaming or GenAI security courses.
 
 
 oVendor AI/ML certifications (Azure AI Engineer, AWS Machine Learning Specialty, GCP ML Engineer) with demonstrated security emphasis.
 
 
 Additional desirable:
 
 
 &bull;GIAC/GWAPT/GXPN/GCLD or similar offensive / cloud / Appsec certs.
 
 
 &bull;Formal training in:
 
 
 oSecure MLOps &amp; ML supply-chain security.
 
 
 oPrivacy engineering &amp; data protection (e.g., CIPT, CDPSE).
 
 
 oOWASP GenAI / LLM Top 10, MITRE ATLAS, CSA MAESTRO &amp; other AI risk frameworks.
 
</div>

Artificial Intelligence Consultant

<div>
 
 We are seeking a
 
 Platform / Cloud Architect
 
 to design and govern the core cloud-agnostic platform foundations for TASMU Platform 2.0. The role ensures
 
 consistent deployment, security, connectivity, and operational standards
 
 across multiple vendor-delivered capabilities.
 
 
 The architect defines the target platform architecture across
 
 Azure
 
 and additional clouds, enabling standardized landing zones, Kubernetes runtime patterns, infrastructure-as-code, and shared platform services (identity, observability, logging, CI/CD, networking). The role provides
 
 technical leadership for platform modernization
 
 , ensures design compliance through architecture reviews, and drives
 
 platform reliability, scalability, and cost governance
 
 from build through operations.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define and maintain
 
 TASMU 2.0 platform reference architecture
 
 (cloud-agnostic runtime, shared services, control plane).
 </li>
 <li>
 Design and govern
 
 landing zones, subscription/project structures, network hub/spoke, DNS, routing, and private connectivity patterns
 
 .
 </li>
 <li>
 Establish standardized
 
 Kubernetes architecture
 
 (AKS/GKE/other), cluster baseline, node pool strategy, GPU/TPU readiness, and autoscaling.
 </li>
 <li>
 Define
 
 IaC/GitOps standards
 
 (Terraform/Bicep/Helm, pipelines, drift control, environment promotion).
 </li>
 <li>
 Own
 
 platform-level security-by-design controls
 
 (identity integration, secrets/keys, WAF, segmentation, policy-as-code).
 </li>
 <li>
 Specify
 
 observability and operations foundations
 
 (OTel, logs/metrics/traces, alerting, ITSM integration, SLOs).
 </li>
 <li>
 Drive
 
 resiliency architecture
 
 (HA, backup/restore, DR strategy, RPO/RTO targets, runbooks and testing).
 </li>
 <li>
 Establish
 
 platform service catalog foundations
 
 and &ldquo;golden paths&rdquo; for onboarding smart solutions and vendors.
 </li>
 <li>
 Partner with
 
 FinOps
 
 to implement cost governance (tagging, budgets, anomaly detection, chargeback/showback).
 </li>
 <li>
 Provide
 
 technical assurance
 
 for vendor platform deliverables and support production readiness reviews/go-live gates.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Deep expertise in
 
 cloud platform architecture
 
 (networking, compute, storage, security, and operations).
 </li>
 <li>
 Strong
 
 Kubernetes platform engineering skills
 
 (cluster design, security, autoscaling, ingress/egress, service mesh concepts).
 </li>
 <li>
 Ability to create
 
 pragmatic cloud-agnostic standards
 
 while leveraging managed services appropriately.
 </li>
 <li>
 Proven experience implementing
 
 IaC/GitOps and platform governance
 
 (policies, baselines, compliance).
 </li>
 <li>
 Strong
 
 troubleshooting mindset
 
 for cross-vendor, cross-environment platform issues and reliability improvements.
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in
 
 Computer Science, Information Technology, Cybersecurity
 
 ; Master&rsquo;s degree highly preferred.
 </li>
 <li>
 
 8+ years
 
 in cloud/platform engineering or architecture roles; experience in government, telco, or critical infrastructure preferred.
 </li>
 <li>
 Hands-on delivery experience with
 
 Azure plus at least one other cloud (GCP/AWS)
 
 and hybrid connectivity patterns.
 </li>
 <li>
 Experience building
 
 secure landing zones, enterprise networks, and multi-environment delivery pipelines
 
 .
 </li>
 <li>
 Experience running
 
 production platforms with SRE/ITIL-aligned practices
 
 (incident/change/problem management).
 </li>
 <li>
 Relevant certifications preferred:
 
 Azure Solutions Architect Expert, Kubernetes CKA/CKS, TOGAF, Cloud Security
 
 .
 </li>
 </ul>
 
 
 
 
 
 Preferred Tools
 
 
 <ul>
 <li>
 
 IaC/GitOps:
 
 Terraform, Bicep, Helm, ArgoCD/Flux, GitHub, Azure DevOps
 </li>
 <li>
 
 Cloud &amp; Kubernetes:
 
 Azure, AKS, GKE, Container Registries, Service Mesh (Istio/Linkerd)
 </li>
 <li>
 
 Observability/Security:
 
 OpenTelemetry, Dynatrace/Datadog, Microsoft Defender for Cloud, Microsoft Sentinel
 </li>
 </ul>
 
 
 
 
 
 Soft Skills
 
 
 <ul>
 <li>
 Strong
 
 technical leadership
 
 and ability to set standards across vendors
 </li>
 <li>
 Clear
 
 communication of complex architectures
 
 to technical and non-technical stakeholders
 </li>
 <li>
 
 Structured problem solving
 
 and root-cause analysis discipline
 </li>
 <li>
 
 Delivery focus:
 
 balancing ideal architecture with time/cost constraints
 </li>
 <li>
 Collaboration and influence across
 
 security, operations, and delivery teams
 
 </li>
 </ul>
</div>

Platform / Cloud Architect

JOB DESCRIPTIONThe Platform / Cloud Architect designs and governs the core cloud-agnostic platform foundations for TASMU Platform 2.0, ensuring consistent deployment, security, connectivity, and operational standards across multiple vendor-delivered capabilities. The role defines the target platform architecture across Azure (existing TASMU 1.0) and additional clouds where required, enabling standardized landing zones, Kubernetes runtime patterns, infrastructure-as-code, and shared platform services (identity, observability, logging, CI/CD, networking). The architect provides technical leadership for platform modernization, ensures design compliance through architecture reviews, and drives platform reliability, scalability, and cost governance from build through operationsDUTIES &amp; RESPONSIBILITIES<ul><li>Define and maintain TASMU 2.0 platform reference architecture (cloud-agnostic runtime, shared services, control plane).</li><li>Design and govern landing zones, subscriptions/projects structure, network hub/spoke, DNS, routing, and private connectivity patterns.</li><li>Establish standardized Kubernetes architecture (AKS/GKE/other), cluster baseline, node pool strategy, GPU/TPU readiness, and autoscaling.</li><li>Define IaC/GitOps standards (Terraform/Bicep/Helm, pipelines, drift control, environment promotion).</li><li>Own platform-level security-by-design controls (identity integration, secrets/keys, WAF, segmentation, policy-as-code).</li><li>Specify observability and operations foundations (OTel, logs/metrics/traces, alerting, ITSM integration, SLOs).</li><li>Drive resiliency architecture (HA, backup/restore, DR strategy, RPO/RTO targets, runbooks and testing).</li><li>Establish platform service catalog foundations and &ldquo;golden paths&rdquo; for onboarding smart solutions and vendors.</li><li>Partner with FinOps to implement cost governance (tagging, budgets, anomaly detection, chargeback/showback).</li><li>Provide technical assurance for vendor platform deliverables and support production readiness reviews/go-live gates.</li></ul>SKILLS &amp; ABILITIES<ul><li>Deep expertise in cloud platform architecture (networking, compute, storage, security, and operations).</li><li>Strong Kubernetes platform engineering skills (cluster design, security, autoscaling, ingress/egress, service mesh concepts).</li><li>Ability to create pragmatic cloud-agnostic standards while leveraging managed services appropriately.</li><li>Proven experience implementing IaC/GitOps and platform governance (policies, baselines, compliance).</li><li>Strong troubleshooting mindset for cross-vendor, cross-environment platform issues and reliability improvements.</li></ul>POTENTIAL BACKGROUND<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cybersecurity, a Master&rsquo;s degree is highly preferred.</li><li>8+ years in cloud/platform engineering or architecture roles; government/telco/critical infrastructure preferred.</li><li>Hands-on delivery experience with Azure plus at least one other cloud (GCP/AWS) and hybrid connectivity patterns.</li><li>Experience building secure landing zones, enterprise networks, and multi-environment delivery pipelines.</li><li>Experience running production platforms with SRE/ITIL-aligned practices (incident/change/problem management).</li><li>Relevant certifications preferred (Azure Solutions Architect Expert, Kubernetes CKA/CKS, TOGAF/Cloud Security).</li></ul>PREFERRED TOOLS / SOFT SKILLS<ul><li>IaC/GitOps: Terraform, Bicep, Helm, ArgoCD/Flux, GitHub/Azure DevOps</li><li>Cloud &amp; Kubernetes: Azure, AKS, GKE, Container Registries, service mesh (Istio/Linkerd)</li><li>Observability/Security: OpenTelemetry, Dynatrace/Datadog, Microsoft Defender for Cloud, Microsoft Sentinel</li></ul>Key Soft Skills<ul><li>Strong technical leadership and ability to set standards across vendors</li><li>Clear communication of complex architectures to technical and non-technical stakeholders</li><li>Structured problem solving and root-cause analysis discipline</li><li>Delivery focus: balancing ideal architecture with time/cost constraints</li><li>Collaboration and influence across security, operations, and delivery teams</li></ul>Job Type: PermanentPay: Up to QAR20,000.00 per month

<div>
 
 We are seeking a
 
 Solution &amp; App Architect
 
 to design and govern application architectures for platform capabilities and vendor-delivered solutions. The role ensures
 
 cloud-agnostic, secure-by-design, scalable applications
 
 aligned with platform standards (identity, APIs, observability, CI/CD, service catalog patterns).
 
 
 Working closely with
 
 product owners, system integrators, and platform/security teams
 
 , the architect defines application blueprints, runtime patterns (microservices, event-driven, mobile/web), integration contracts, and non-functional requirements. The role provides
 
 architecture assurance across delivery phases
 
 and ensures operational readiness, maintainability, and consistent developer experience.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define
 
 target-state application architecture
 
 for platform capabilities and onboarded smart solutions (web, mobile, backend services).
 </li>
 <li>
 Establish
 
 cloud-agnostic app patterns
 
 : microservices, modular monolith, event-driven workflows, and API-first design.
 </li>
 <li>
 Specify
 
 application NFRs
 
 (availability, scalability, performance, resiliency, observability, localization) and acceptance criteria.
 </li>
 <li>
 Define
 
 identity and authorization patterns
 
 (Entra/OIDC, RBAC, token scopes, service-to-service auth).
 </li>
 <li>
 Ensure consistent
 
 API and event design
 
 (OpenAPI/AsyncAPI, versioning, idempotency, rate limits, backward compatibility).
 </li>
 <li>
 Drive
 
 secure application architecture
 
 (OWASP, secure storage, secrets handling, encryption, input validation, threat modeling).
 </li>
 <li>
 Define
 
 data access patterns and caching strategies
 
 , aligned with platform data governance and multi-tenant boundaries.
 </li>
 <li>
 Provide
 
 architecture assurance
 
 through design reviews, ADRs, and implementation checkpoints with vendors.
 </li>
 <li>
 Define
 
 deployment and release patterns
 
 (blue/green, canary, feature flags) aligned with GitOps and CI/CD.
 </li>
 <li>
 Support
 
 operational readiness
 
 : logging/metrics/tracing, runbooks, SLOs, incident readiness, and handover to operations.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Strong
 
 application architecture skills
 
 across frontend/mobile, backend services, and distributed systems.
 </li>
 <li>
 Expertise in
 
 API design, integration patterns, and event-driven architectures
 
 .
 </li>
 <li>
 Ability to translate
 
 business workflows into robust application services and user journeys
 
 .
 </li>
 <li>
 Proven
 
 security-by-design and performance/resiliency engineering
 
 capability.
 </li>
 <li>
 Strong
 
 documentation and decision-making discipline
 
 (ADRs, diagrams, reference implementations).
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in
 
 Computer Science, Information Technology, Cybersecurity
 
 ; Master&rsquo;s degree highly preferred.
 </li>
 <li>
 
 7+ years
 
 in solution/application architecture or senior engineering roles delivering enterprise platforms.
 </li>
 <li>
 Experience with
 
 Kubernetes-based deployments and cloud-native patterns
 
 , with emphasis on portability/cloud-agnostic choices.
 </li>
 <li>
 Hands-on background with
 
 modern web/mobile architectures and scalable backend frameworks
 
 .
 </li>
 <li>
 Experience integrating with
 
 IAM, API gateways, observability stacks, and CI/CD tooling
 
 in regulated environments.
 </li>
 <li>
 Familiarity with
 
 architecture frameworks and quality practices
 
 (TOGAF concepts, DDD, clean architecture, 12-factor apps).
 </li>
 </ul>
 
 
 
 
 
 Preferred Tools
 
 
 <ul>
 <li>
 
 API &amp; Integration:
 
 OpenAPI/AsyncAPI, Postman, API gateways (Azure APIM / Apigee / Kong)
 </li>
 <li>
 
 Delivery &amp; Deployment:
 
 GitHub/Azure DevOps, Docker, Kubernetes, Helm, feature flags (PostHog/LaunchDarkly-style)
 </li>
 <li>
 
 Observability &amp; Security:
 
 OpenTelemetry, Dynatrace/Datadog, SAST/DAST tooling, OWASP dependency scanning
 </li>
 </ul>
 
 
 
 
 
 Soft Skills
 
 
 <ul>
 <li>
 Strong facilitation for
 
 design workshops and cross-vendor alignment
 
 </li>
 <li>
 Clear
 
 communication with product and engineering stakeholders
 
 </li>
 <li>
 Pragmatic
 
 prioritization and decision-making
 
 under delivery constraints
 </li>
 <li>
 Ownership and
 
 accountability for architecture quality and outcomes
 
 </li>
 <li>
 Mentoring mindset and ability to
 
 uplift vendor and internal engineering teams
 
 </li>
 </ul>
</div>

Solution & APP Architect

Explore 81+ Cybersecurity architect in Qatar this March. Find roles across top companies and apply now to boost your career.

81 cybersecurity architect jobs In Qatar

Cybersecurity Architect

Cybersecurity Architect

Cloud Infrastructure Architect

Artificial Intelligence Consultant

Platform / Cloud Architect

Platform / Cloud Architect

Solution & APP Architect