Key Responsibilities:
- Design and implement security controls and architectures to protect Client’s IT and OT assets (on-premise and cloud).
- Support technical risk assessments, identifying vulnerabilities and recommending mitigations.
- Define security requirements for systems, networks, applications, and cloud environments.
- Embed cybersecurity within change management processes and governance.
- Conduct threat modelling and analyze threat intelligence to prioritize mitigation efforts.
- Provide advanced support for complex security incidents.
- Help build the DevSecOps function and support secure SDLC in IAC and CI/CD pipelines (Ansible, Terraform, Docker, K8s, Jenkins, etc.) within a Zero Trust + SASE model.
- Advise on Azure cloud architecture and security best practices, including Power App development.
- Guide product and project teams on incorporating security architecture requirements.
- Roll out and manage Defender for Cloud Apps.
- Advise teams on security principles across multiple domains: containerization, zero trust, encryption, PKI, database, web applications, secure development, infrastructure, cloud, and IAM.
- Design and oversee IAM, endpoint protection, firewalls, SIEM, and encryption solutions.
- Evaluate emerging cybersecurity technologies and recommend improvements.
- Represent cybersecurity on the Architecture Review Board (ARB).
- Support the development of security documentation, policies, standards, and incident response plans.
- Liaise with internal project teams to ensure secure delivery.
Required Qualifications & Experience:
- Bachelor’s or Master’s in Cybersecurity, IT, Computer Science, or related field.
- 10+ years in cybersecurity architecture, security engineering, or related roles.
- Strong knowledge of frameworks like NIST, CIS Controls, and Zero Trust.
- Hands-on experience with firewalls, SIEM, IDS/IPS, DLP, EDR, and cryptography.
- Cloud security expertise (AWS, Azure, GCP) and DevSecOps experience.
- Familiarity with regulatory compliance (NIS2, GDPR, PCI-DSS, HIPAA, ISO 27001).
- Security certifications (CISSP, CISM, SABSA, TOGAF, CCNA) required.
- Excellent analytical, problem-solving, and communication skills.
Preferred Skills:
- Azure expertise and relevant certifications (e.g., Azure Solutions Architect Expert).
- Experience with AI-driven security solutions and automation.
- Scripting/programming skills (Python, PowerShell).
- Experience in large enterprise or government security environments.
