Cybersecurity Architect & Engineering Lead

Tanqeeb; Abu Dhabi; On-site; AED 350,000 - 550,000; Full time

Job summary

DXC Technology is seeking an experienced Cybersecurity Architect & Engineering Lead in the United Arab Emirates for an on-site senior role. You will define and govern enterprise cybersecurity architecture across multiple domains, embedding security throughout design, engineering, integration, and operations.

The role requires deep expertise across cloud, network, IAM, application security, data protection, and monitoring technologies.

Qualifications

• Bachelor's degree or higher in cybersecurity, CS, IT, engineering or related field.
• Minimum 15+ years in IT/cybersecurity with architecture/engineering focus.
• Proven track record as Cybersecurity Architect or Security Engineering Lead in large environments.

Responsibilities

• Lead end-to-end cybersecurity architecture across multiple technology domains.
• Drive Security-by-Design, Zero Trust, Defence-in-Depth, Least Privilege principles.
• Provide technical direction to security engineers, architects, and delivery teams.
• Review designs for alignment with approved architecture and standards.
• Support implementation, integration, testing, and remediation of cybersecurity technologies.

Skills

Cybersecurity architecture

Security engineering

Cloud security

Zero Trust

Security governance

Education

Bachelor's degree in Cybersecurity

Tools

Azure

AWS

Job description

Cybersecurity Architect & Engineering Lead

DXC Technology | United Arab Emirates | On-site

DXC Technology is seeking an experienced Cybersecurity Architect & Engineering Lead to provide cybersecurity architecture, engineering, and technical leadership within a large-scale technology transformation environment in the UAE.

The successful candidate will be responsible for defining, governing, and driving the implementation of enterprise cybersecurity architecture across multiple technology domains, ensuring that security is embedded throughout the design, engineering, integration, and operational lifecycle.

This is a senior technical leadership role requiring strong expertise across security architecture, security engineering, cloud security, network security, IAM/PAM, application security, data protection, endpoint security, and security monitoring technologies.

Key Responsibilities

Cybersecurity Architecture

• Lead the definition and implementation of end-to-end cybersecurity architecture across multiple technology domains.
• Develop target security architectures, roadmaps, principles, standards, patterns, and technical security requirements.
• Translate business, technology, security, and risk requirements into practical cybersecurity architecture and engineering solutions.
• Embed Security-by-Design, Zero Trust, Defence-in-Depth, Least Privilege, and Secure-by-Default principles throughout the technology lifecycle.
• Ensure cybersecurity architecture is aligned across cloud, infrastructure, network, applications, APIs, identity, data, endpoints, and security platforms.

Security Engineering Leadership

• Lead cybersecurity engineering activities across multiple technical workstreams.
• Provide technical direction to security engineers, architects, technical leads, vendors, and delivery teams.
• Translate security architecture into implementable engineering designs, technical controls, configurations, and standards.
• Review security engineering designs and ensure alignment with approved architecture.
• Support implementation, integration, testing, and validation of cybersecurity technologies.
• Drive resolution of complex security engineering and integration issues.

Architecture Governance & Design Authority

• Establish and maintain cybersecurity architecture governance and design assurance processes.
• Lead or participate in Architecture Review Boards and technical design authorities.
• Review and approve security designs produced by internal teams, vendors, and technology partners.
• Ensure solutions comply with approved security architecture, standards, patterns, and technical requirements.
• Document key security architecture decisions, exceptions, risks, and remediation requirements.

Identity & Access Management

• Define architecture and engineering requirements across IAM, PAM, SSO, MFA, federation, identity governance, directory services, RBAC/ABAC, and identity lifecycle management.
• Ensure consistent identity and access controls across applications, infrastructure, cloud platforms, and enterprise services.
• Promote Zero Trust and least-privilege access models.
• Review privileged access and administrative security architecture.

Cloud & Infrastructure Security

• Define and govern security architecture across public cloud, private cloud, hybrid infrastructure, compute, storage, virtualization, containers, and platform services.
• Ensure appropriate workload protection, configuration management, encryption, secrets management, vulnerability management, and security monitoring.
• Provide architecture guidance for cloud-native security capabilities.
• Support implementation of technologies and approaches such as CSPM, CNAPP, CWPP, cloud IAM, workload security, and cloud-native monitoring.

Network & Endpoint Security

• Define architecture and engineering requirements for enterprise network and endpoint security.
• Provide technical leadership across NGFW, WAF, IDS/IPS, NAC, VPN, segmentation, micro-segmentation, SASE/SSE, secure access, EDR/XDR, and endpoint protection.
• Ensure appropriate network segmentation and trust boundaries are incorporated into solution designs.
• Support Zero Trust Network Access and modern secure-access architectures.
• Ensure network and endpoint security technologies integrate effectively with monitoring and response platforms.

Application, API & DevSecOps Security

• Define security architecture requirements across applications, APIs, middleware, integration platforms, and microservices.
• Embed application security requirements throughout the software development lifecycle.
• Promote DevSecOps and Secure SDLC practices.
• Support security requirements for CI/CD pipelines, code repositories, secrets management, dependency management, and application testing.
• Ensure appropriate controls for API authentication, authorization, encryption, rate limiting, and secure integration.
• Support implementation of SAST, DAST, SCA and related application-security capabilities.

Data Security & Cryptography

• Define architecture requirements for data protection throughout the data lifecycle.
• Ensure appropriate controls for data classification, encryption, tokenization, key management, secrets management, and secure data exchange.
• Define security requirements for data at rest, in transit, and where applicable in use.
• Work with data and application architects to ensure appropriate security controls are incorporated into data architectures.
• Provide guidance on PKI, certificates, encryption standards, and cryptographic key management.

Security Monitoring & Detection Integration

• Ensure cybersecurity architecture supports effective monitoring, detection, investigation, and response.
• Define technical integration requirements across SIEM, SOAR, EDR/XDR, NDR, threat intelligence, vulnerability management, cloud security, and other security platforms.
• Define logging, telemetry, audit, and security-event requirements across technology solutions.
• Work closely with security operations and MDR teams to improve visibility and detection coverage.
• Ensure newly implemented technologies are appropriately integrated into security monitoring capabilities.

Vulnerability & Security Assurance

• Support technical vulnerability management and remediation activities.
• Review security vulnerabilities and identify appropriate technical remediation strategies.
• Conduct or support threat modelling and security architecture assessments.
• Ensure security controls are technically testable and measurable.
• Support security testing, penetration testing, remediation, and technical assurance activities.
• Drive closure of architecture and engineering-related security findings.

Required Qualifications & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Typically 15+ years of IT/cybersecurity experience, with substantial experience in cybersecurity architecture and engineering.
• Demonstrated experience as a Cybersecurity Architect, Security Architect, Security Engineering Lead, Lead Security Architect, or equivalent.
• Proven experience designing cybersecurity solutions within large-scale, complex enterprise technology environments.
• Strong technical knowledge across multiple cybersecurity domains, including:
• Cloud Security
• Network Security
• IAM/PAM
• Application & API Security
• Data Security
• Endpoint Security
• SIEM/SOAR and Security Monitoring
• Vulnerability Management
• Strong understanding of Zero Trust, Security-by-Design, Defence-in-Depth, and Least Privilege principles.
• Experience with cloud and hybrid security architecture across platforms such as Microsoft Azure, AWS, or equivalent.
• Strong experience working within complex multi-vendor and systems integration environments.
• Experience reviewing and governing technical security designs.
• Strong understanding of security architecture governance, threat modelling, risk assessment, and security assurance.
• Demonstrated ability to lead architects, engineers, vendors, and cross-functional technical teams.
• Excellent stakeholder management, communication, influencing, and technical leadership skills.

Preferred Qualifications

• Experience delivering major cybersecurity architecture and engineering initiatives in the UAE or wider GCC region.
• Experience with modern security technologies and architectures including Zero Trust, SASE/SSE, CNAPP, CSPM, EDR/XDR, SIEM/SOAR, IAM/PAM, DevSecOps, and cloud-native security.
• Knowledge of recognised frameworks and standards such as NIST CSF, ISO/IEC 27001, CIS Controls, SABSA, MITRE ATT&CK, and TOGAF.
• Relevant professional certifications such as:
• CISSP
• CCSP
• SABSA
• CISM
• GIAC
• TOGAF
• Microsoft Azure Security
• AWS Security
• Equivalent cybersecurity or cloud certifications

What We Are Looking For

We are looking for a hands-on cybersecurity architecture and engineering leader, rather than a candidate whose background is predominantly GRC, audit, policy, or SOC operations.

The successful candidate should have the technical breadth to understand security across the complete technology landscape and sufficient depth to challenge designs, guide engineers, govern vendors, and make complex cybersecurity architecture decisions.

The ideal candidate will combine cybersecurity architecture expertise, engineering credibility, technical leadership, strong governance, stakeholder influence, and pragmatic decision-making.