Security Architect

 Job Title: Infra Security Architect/Lead (Arabic Speaking)

 Location: Riyadh, KSA

Job role and responsibility

• Infra and Security design for various business & Technology Initiatives

• Maintenance of Policies & Standard Decisions for Infra and Security Design

• Ensure delivery of cost effective & high-quality design within timelines of the project / initiative • Delivery and Maintenance of Infra and Security Models as design assets using design and architecture tools

• Track architecture backlog and identify opportunities to minimize them • Engage with partners & vendors to baseline Infra and Security design decisions

 • Manage relevant stakeholders & sign off authorities for closure and transition of design to provision

• Acquire knowledge and take over design aspects of newly on boarded technologies in Infra and Security Space

 • Review other domains of design such as application, services and data to identify impact areas in Infra and Security domains

• Deliver high quality design

• Deliver cost effective design

• Delivery of design within acceptable timelines

• Ensure 100% compliance to standards / principles set by Bank / Enterprise Architect in solution design

• Maintain high degree of Relationship and professional rapport with any IT / Partner / Business stakeholder being dealt with

 • Deliver high quality specs and ensure 100% completeness of solution • Perform effective design reviews to ensure that no gaps are created in design • Design sustainable and high performing solution

 • Expertise in 360 views of Information, Network and Web Applications Security • Strong analytical and problem-solving skills

• Good communication (written and oral) and interpersonal skills • Ability to work under pressure and willing to go the extra miles to meet the project timelines/goals • Well organized with attention to detail

 • Strong team player Required skills & Experience

 • Strong understanding of security architecture best practices, standards and frameworks.

 • Experience working in large, geographically dispersed IT organizations and decentralized Security Model.

 • Minimum 10 +years of experience in IT Security field.

• Practical experience in the Information Security Architecture field, with emphasis on application security architecture and authorization approaches (role-based access control, direct entitlements-based).

• Strong communication (written/verbal) and collaboration skills

• Consulting, negotiation and relationship skills

Candidate must be fluent in both Arabic and English

Technical and Analytical Skills:

❖Hands-on in design and implementation for client requirements into solution of Routing, Switching, VPN, LAN, Network Security, Firewalls, NGFW, NAT, IPS, Application Control, URL filtering DDoS protection

Expert in L7 technologies and implementation like app-id, user-id, content-id, decryptions, ULR filtering, IPS Public Key Infrastructure (PKI)

 ❖ Consulting on-prem to cloud migration and firewall migration projects, covering the complete product lifecycle, from research and functional specification to site and device migration, ensuring minimal downtime in production

❖ Analysing and evaluating the security architecture, encompassing firewall designs, to pinpoint potential security gaps and provide enhancement recommendations on security controls.

❖ Executing routine vulnerability assessments and penetration tests to unearth potential vulnerabilities within firewall configurations and network infrastructure

❖ Formulating and sustaining security policies, standards, and best practices that govern firewall configuration, access control, and comprehensive network security

❖ Monitoring network traffic and scrutinizing firewall logs to swiftly identify and respond to security incidents and potential threats

❖ Engineering, implementing, and managing firewall solutions for fortified network security, encompassing rule configuration, access controls, and advanced threat prevention mechanisms

 ❖ Conducting comprehensive investigations into security incidents tied to firewall breaches or suspicious activities, pinpointing underlying causes and instituting corrective actions

❖ Performing regular audits of firewall configurations to ensure they adhere to security policies, streamlining rules and ensuring effective segmentation

❖ Evaluating and endorsing firewall vendors, solutions, and technologies to guarantee the organization employs the most potent security measures

❖ Ensuring that firewall configurations and security measures comply with pertinent regulatory requirements specific to the banking industry.