enterprise security architect

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Work Location: In person

Cybersecurity

<div>AI, Security Architect

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.
Overview

BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.

Primary Responsibilities
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
Required Qualifications
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

AI Security Architect

Riyadh Air

<div>About the Company:
<div>
Riyadh Air (RX), headquartered in the Saudi Capital, is the new national airline that&rsquo;s shaping the future of flying. It seeks to lead the aviation industry by transforming Saudi Arabia into a global aviation and trade hub &ndash; a digitally native airline that will connect the kingdom to more than 100 destinations.
</div>About the Role:

Are you a collaborative and strategic Enterprise Security Architect with the ability to create comprehensive security frameworks? 
This is a pivotal role where you will design and implement security architecture, ensuring robust protection across systems, data, and applications. 
You will be instrumental in security architecture development in alignment with TOGAF and SABSA frameworks, as well as supporting cloud security, identity management, data protection, API security; all while aligning security strategies with business objectives. 
A core component of this role is to conduct regular assessments against systems or designs to identify security gaps and vulnerabilities and provide recommendations to enhance the architecture security. 
To achieve security architecture objectives, you will work cross-functionally with IT, DevOps, business teams and vendors to integrate, embed and validate security by design. 
Here's your opportunity to shape the future of enterprise security, defining architecture strategies and fortifying cloud security and IAM frameworks.<div> 
</div>
About You:

Degree qualified, you will possess a minimum of 7 years of experience in cybersecurity, of which at least 2 years would have been in security architecture related roles. 
Your experience will include hands-on exposure to cloud platforms and related security solutions. 
Certifications such as TOGAF, SABSA, CISSP, CISM, CCSP, or MS Azure Certified Security will be viewed favourably. 
We&rsquo;d love to hear from you even more if you have experience in designing and implementing IAM, Cloud, Data and API security frameworks. 
This is your opportunity to shape the future of air travel. Bring your best and show us why you can own this position within Riyadh Air. 
Please submit your application by clicking on the Apply button. Our Talent Acquisition team will be reviewing applications shortly</div>

Enterprise Security Architecture Manager

Deloitte

Identity and Access Management ArchitectReference Code 1872
 
Country: United States (US)
 
US Locations: USA - Hermitage; USA - Cincinnati; USA - Cleveland; USA - Jacksonville; USA - Kansas City; USA - Nashville; USA - Pittsburgh; USA - Tampa
 
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
 
Work you'll do
 
We are seeking a Senior Manager-level IAM Architect to partner with Senior IAM leadership team to define and drive the technical strategy and architecture for Identity and Access Management (IAM) across the organization. This role combines strategic leadership, hands-on solution design with product owners, and senior level stakeholder engagement, to secure identities, enable business objectives, and improve user experience across digital channels. This individual must have a pulse on the emerging identity technology trends and best practices to coordinate with Product Owners for integrated IAM architectures and roadmaps.
 
Core Responsibilities
 
Partner with Senior IAM leadership team to define and own the enterprise IAM architecture, strategy, reference patterns, and roadmaps across authentication, authorization, identity lifecycle, privileged access, and account protection.
 
Engage in executive level leadership conversations, translate business goals into IAM requirements, coordinate with IAM product owners on technical feasibility to ensure solutions scale and interoperate across on-premises, cloud, and hybrid environments.
 
Partner with IAM product technical leads to assist with technical design and implementation for authentication (e.g. MFA, SSO, etc), authorization models (e.g. RBAC, ABAC, etc), identity provisioning, lifecycle management, and privileged access controls.
 
Champion innovation with Identity and Access Management tools, evaluate and provide recommendations to product owners for consideration and integration with the existing platform, while balancing security, privacy, and usability.
 
Architect secure integrations between IAM platforms and applications, directories, cloud services, and CI/CD pipelines, set standards and reusable patterns for developers.
 
Partner with IAM Sr. Leadership team and IAM product technical leads to address IAM risk assessments, threat modeling, and remediation strategies, partner with security, risk, and compliance teams to implement controls and measure risk reduction.
 
Partner with IAM product technical leads to oversee incident response activities as they relate to identity compromise, and lead post-incident root-cause analysis and remediation.
 
Drive adoption: create technical guidance, architecture diagrams, and executive-level briefings, mentor architects and senior engineers on IAM best practices.
 
Collaborate with product, engineering, and business leaders to prioritize roadmap items, measure outcomes (security posture, access-related incidents, time-to-provision), and demonstrate business value.
 
Ensure compliance with relevant regulations and internal policies, support audits and attestations related to identity and access controls.
 
The team
 
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
 
Qualifications
 
Do you possess the following?: 
10+ years of IAM experience with progressive technical leadership, experience in a consulting or large enterprise environment preferred.
 
Proven track record designing, delivering, and operating enterprise-scale IAM solutions across cloud and on-prem environments.
 
Deep technical knowledge of authentication/authorization protocols and standards (OAuth2/OIDC, SAML, SCIM, LDAP) and modern IAM architectures.
 
Hands-on experience with at least two major IAM technologies (e.g., Entra ID/Azure AD, Microsoft AD, CyberArk, SailPoint, Ping Identity).
 
Strong stakeholder management and communication skills, able to present technical concepts to executive audiences and translate business needs into technical requirements.
 
Experience leading vendors, technical teams, and cross-functional workstreams to successful outcomes.
 
Advanced degree (MS) or certifications (e.g., CISSP, CISM, SABSA, TOGAF, vendor-specific IAM certs).
 
Experience with zero-trust identity models, identity governance, privileged access management, and modern authentication modalities (passwordless, biometrics, adaptive MFA).
 
Prior experience building IAM programs or working in high-regulation industries (finance, healthcare, government).
 
Balance strategic thinking with the ability to roll up sleeves and deliver technically where needed.
 
Identity Providers / Directories: Entra ID/Azure AD, Microsoft AD
 
Identity Governance and PAM: SailPoint, CyberArk
 
Authentication & Federation: Ping Identity, OAuth2/OIDC, SAML, SCIM
 
Cloud & DevOps integration: AWS/Azure/GCP identity services, CI/CD tooling
 
Limited immigration sponsorship may be available.
 
Our culture
 
At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
 
Professional development
 
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
 
Benefits
 
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
 
Recruiting for this role ends on 09/01/2026.
 
Deloitte Global is required by local law to include a reasonable estimate of the compensation range for this role for individuals applying to work in our (Open Cities Requiring Pay Disclosure) locations. This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and delivery model. We would not anticipate that the individual hired into this role would land at or near the top end of the range, but such a decision will be dependent on the facts and circumstances of each case. A reasonable estimate of the range is - for individuals applying to work in these locations.

Identity and Access Management Architect

Starlink Qatar

<div>
 
 We are seeking a
 
 Cybersecurity Architect
 
 to define and govern the end-to-end security architecture for platform capabilities and vendor-delivered solutions. The role ensures
 
 secure-by-design implementation
 
 across cloud-agnostic deployments.
 
 
 You will establish security standards, reference architectures, and assurance processes covering
 
 identity, network segmentation, application security, data protection, and operational security monitoring
 
 . Working with stakeholders, vendors, and operations teams, the architect drives
 
 threat modeling, security controls validation, and compliance evidence readiness
 
 , including SIEM/SOAR integration, vulnerability management, and incident response procedures. The role ensures consistent security posture across multi-tenant environments and multiple cloud platforms.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Define
 
 security reference architecture and baseline controls
 
 for cloud, Kubernetes, applications, and data services.
 </li>
 <li>
 Lead
 
 security governance
 
 : design reviews, threat modeling, security exceptions, and risk acceptance processes.
 </li>
 <li>
 Define
 
 identity and access controls
 
 (Entra ID, RBAC, PIM/JIT, conditional access, service principals, secrets management).
 </li>
 <li>
 Design
 
 network security architecture
 
 (segmentation/trust zones, private endpoints, WAF, egress controls, firewall policies).
 </li>
 <li>
 Establish
 
 application security standards
 
 (OWASP, secure SDLC, SAST/DAST, dependency/SBOM, container image signing).
 </li>
 <li>
 Define
 
 data security controls
 
 (classification, encryption/CMK/HSM, DLP, key management, retention, secure deletion).
 </li>
 <li>
 Own
 
 security monitoring requirements and integrations
 
 : Defender for Cloud (CSPM/CWPP), Sentinel (SIEM), SOAR playbooks, alert tuning.
 </li>
 <li>
 Define
 
 vulnerability management and patching processes
 
 for OS/Kubernetes/runtime components, including SLA targets and reporting.
 </li>
 <li>
 Support
 
 incident response readiness
 
 : runbooks, tabletop exercises, forensic logging, evidence handling, and post-incident improvements.
 </li>
 <li>
 Provide
 
 assurance of vendor deliverables and go-live readiness
 
 (pen test coordination, remediation validation, compliance evidence packs).
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Abilities
 
 
 <ul>
 <li>
 Deep understanding of
 
 cloud security architecture, zero-trust networking, and Kubernetes/container security
 
 .
 </li>
 <li>
 Strong capability in
 
 IAM design and privileged access governance
 
 in regulated environments.
 </li>
 <li>
 Ability to translate
 
 risk and compliance requirements into practical technical controls and acceptance criteria
 
 .
 </li>
 <li>
 Experience implementing
 
 security monitoring, detection engineering, and incident response processes
 
 .
 </li>
 <li>
 Strong
 
 stakeholder influence
 
 and ability to enforce standards across multiple vendors and teams.
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in
 
 Computer Science, Information Technology, Cybersecurity
 
 ; Master&rsquo;s degree highly preferred.
 </li>
 <li>
 
 8+ years
 
 in cybersecurity architecture or security engineering roles in government, telco, finance, or critical infrastructure.
 </li>
 <li>
 Hands-on experience securing
 
 Azure and at least one other cloud
 
 (GCP/AWS), including hybrid connectivity and shared responsibility.
 </li>
 <li>
 Proven experience with
 
 SIEM
 
 (Microsoft Sentinel preferred) and
 
 CSPM/CWPP
 
 (Defender for Cloud preferred).
 </li>
 <li>
 Experience with
 
 secure SDLC, vulnerability management, penetration testing coordination, and remediation programs
 
 .
 </li>
 <li>
 Relevant certifications preferred:
 
 CISSP/CCSP, CISM, Azure Security Engineer, CKA/CKS, ISO 27001 awareness
 
 .
 </li>
 </ul>
 
 
 
 
 
 Preferred Tools
 
 
 <ul>
 <li>
 
 Security posture &amp; SIEM:
 
 Microsoft Defender for Cloud, Microsoft Sentinel, SOAR playbooks
 </li>
 <li>
 
 Container/Kubernetes security:
 
 image scanning (Trivy/Anchore), policy-as-code (OPA/Gatekeeper), cosign/Sigstore, Kubernetes audit tools
 </li>
 <li>
 
 Identity &amp; secrets:
 
 Azure Entra ID, PIM, Key Vault/KMS/HSM, PAM tooling
 </li>
 </ul>
 
 
 
 
 
 Soft Skills
 
 
 <ul>
 <li>
 Risk-based
 
 decision-making
 
 and ability to articulate trade-offs clearly
 </li>
 <li>
 Strong facilitation of
 
 threat modeling and security design reviews
 
 </li>
 <li>
 Clear, structured
 
 documentation and compliance evidence mindset
 
 </li>
 <li>
 Calm, decisive leadership during
 
 incidents and high-pressure situations
 
 </li>
 <li>
 
 Collaborative approach
 
 that enables delivery while maintaining security standards
 </li>
 </ul>
</div>

Cybersecurity Architect

Asian Global Infotech

Urgent Hiring &ndash; L3 Network Administrator (CCIE)Location: Dubai, UAE (Onsite &ndash; UCMC Dubai) Client: Healthcare Position Type: Full-Time Salary: upto AED 18,000 + Single Benefits Joining: Immediate to Maximum 1 Month Nationality: OpenProfiles with CCIE certification are mandatory.Job TitleSenior L3 Network Administrator / Network Architect (CCIE)Job SummaryWe are looking for a highly experienced L3 Network Engineer / Architect (8&ndash;10 years) with CCIE certification to lead enterprise network architecture, security, and cloud networking initiatives.The role demands deep expertise in security (Zero Trust), Azure networking (L3), and multi-vendor enterprise environments, along with the ability to handle critical escalations, architecture validation, and performance optimization.Key Responsibilities1. Network Architecture &amp; Design<ul><li>Act as the technical authority for enterprise and hybrid cloud network architecture.</li><li>Review and validate HLDs &amp; LLDs for complex network/security designs.</li><li>Drive scalability, resiliency, and performance improvements.</li><li>Lead architecture decisions across multi-vendor environments.</li></ul>2. Advanced Support &amp; Escalation Handling<ul><li>Serve as the final escalation point for critical network incidents.</li><li>Lead incident bridges and service restoration efforts.</li><li>Identify root causes and implement long-term stability improvements.</li></ul>3. Security &amp; Zero Trust Architecture<ul><li>Lead security design and firewall architecture including:</li><li>Palo Alto Firewalls (Expert Level)</li><li>Cisco Firepower Threat Defense (FTD)</li><li>Drive network segmentation &amp; Zero Trust implementation.</li><li>Ensure alignment with enterprise security standards &amp; compliance frameworks.</li></ul>4. Cloud &amp; Hybrid Networking (Azure &ndash; L3)<ul><li>Provide L3 support for:</li><li>VNet architecture, routing, UDRs, NSGs</li><li>Azure VPN Gateway &amp; hybrid connectivity</li><li>Ensure secure connectivity between on-prem and Azure environments.</li><li>Optimize cloud performance, availability, and security.</li></ul>5. Core Network Engineering<ul><li>Manage routing &amp; switching:</li><li>BGP, OSPF</li><li>SD-WAN, LAN/WAN optimization</li><li>Govern DNS, DHCP, and core network services.</li></ul>6. Cisco Ecosystem (Advanced Platforms)<ul><li>Provide expert-level support for:</li><li>Cisco DNA Center (DNAC) &ndash; automation &amp; analytics</li><li>Cisco ISE &ndash; NAC &amp; policy enforcement</li><li>Cisco WLC &ndash; enterprise wireless networks</li></ul>7. Load Balancing &amp; Application Delivery<ul><li>Architect and manage F5 Load Balancers:</li><li>Traffic management &amp; optimization</li><li>High availability and resilience</li></ul>8. Governance, Compliance &amp; Capacity Planning<ul><li>Lead capacity planning &amp; performance management.</li><li>Ensure audit readiness &amp; compliance across all network platforms.</li><li>Maintain architecture documentation and governance standards.</li></ul>9. Change Management &amp; Leadership<ul><li>Participate in / lead Change Advisory Board (CAB).</li><li>Approve high-risk network changes.</li><li>Mentor L2/L3 engineers and provide technical leadership.</li></ul>Required Skills &amp; ExperienceExperience<ul><li>8&ndash;10 years in enterprise network engineering</li><li>Proven experience in L3 / Architect-level roles</li><li>Experience in large-scale, mission-critical environments</li></ul>Mandatory Technical Skills<ul><li>✅ CCIE (Enterprise Infrastructure or Security) &ndash; Mandatory</li><li>✅ Palo Alto Firewalls (Expert &ndash; segmentation &amp; Zero Trust)</li><li>✅ Cisco Firepower Threat Defense (FTD)</li><li>✅ Microsoft Azure Networking (L3 Level)</li><li>✅ Cisco DNAC, ISE, WLC</li><li>✅ F5 Load Balancers</li><li>✅ Strong expertise in:</li><li>BGP, OSPF, SD-WAN</li><li>LAN/WAN technologies</li><li>DNS, DHCP</li></ul>CertificationsMandatory<ul><li>CCIE (Enterprise Infrastructure or Security)</li></ul>Preferred<ul><li>Palo Alto: PCNSE</li><li>Microsoft Azure: AZ-700</li><li>F5: Certified Administrator / Specialist</li><li>ITIL&reg; 4 Foundation</li></ul>Key Hiring Focus<ul><li>Strictly CCIE-certified candidates</li><li>Strong hands-on + architecture-level experience</li><li>Immediate or short notice candidates preferred</li></ul>Call to ActionSubmit relevant CVs at lakshmi@asianglobalinfotech.com &amp; Kavya@asianglobalinfotech.com ⚡ Priority goes to candidates with CCIE + Security + Azure + F5 expertiseJob Type: Full-timePay: Up to AED18,000.00 per monthApplication Question(s):<ul><li>Do you hold a valid CCIE certification (Enterprise Infrastructure or Security)?</li><li>How many years of experience do you have in L3 network engineering or network architecture?</li><li>Do you have hands-on experience with Palo Alto firewalls and network segmentation / Zero Trust?</li></ul>Brief details if Yes<ul><li>Do you have experience with Microsoft Azure networking (VNet, VPN Gateway, NSG, routing)?</li><li>Are you currently available to join within 1 month or less?</li></ul>Work Location: In person

L3 Network Administrator (CCIE)

Ceenex Global LLC

We are Hiring!!!#UAEjobs #DubaiJobs #NetworkEngineer #CCIE #Senior #L3Position - Senior L3 Network Admin&ndash; Security, Cloud &amp; Enterprise NetworksLocation - Dubai, UAEExperience - 8+ yearsSalary - Max 20000 AED + BenefitsJob SummaryWe are seeking a highly senior L3 Network Engineer / Network Architect with 8&ndash;10 years of hands-on enterprise experience to provide architecture-level support, lead complex network design validation, and drive network optimization, security posture, and availability improvements across enterprise and hybrid cloud environments. The role requires CCIE-level expertise, deep Azure networking skills at L3 level, and strong leadership in critical escalations, Zero Trust implementation, and governance.Experience&middot; 8&ndash;10 years of experience in enterprise network engineering, with senior L3 / architect-level ownership&middot; Proven experience leading large-scale, mission-critical network environmentsTechnical Expertise (Mandatory)&middot; CCIE (Enterprise Infrastructure or Security) &ndash; #mandatory&middot; Palo Alto Firewalls (expert level, including segmentation &amp; Zero Trust)&middot; Cisco Firepower Threat Defense (FTD)&middot; Microsoft Azure Networking &ndash; L3 level&middot; Cisco DNAC, Cisco ISE, Cisco WLC&middot; F5 Load Balancers&middot; Strong expertise in BGP, OSPF, SD-WAN, LAN/WAN&middot; Solid understanding of DNS, DHCP, and enterprise network servicesCertifications (Mandatory / Preferred)&middot; CCIE &ndash; Enterprise Infrastructure or Security (#Mandatory)&middot; Palo Alto Networks: PCNSE (strongly preferred)&middot; Microsoft Azure: AZ-700 (Azure Network Engineer Associate)&middot; F5 Networks: F5 Certified Administrator / Specialist&middot; ITIL&reg; 4 Foundation (preferred)APPLY AS SOON AS POSSIBLE!Email- greeshma@ceenexglobal.comJob Type: Full-timePay: AED16,000.00 - AED20,000.00 per monthWork Location: In person

Senior L3 Network Admin– Security, Cloud & Enterprise

Search 10000+ Enterprise security architect jobs near you this May. New roles added regularly across leading industries. Apply today.