Security Architect

Good co India; United Arab Emirates; On-site; AED 350,000 - 600,000; Full time

Job summary

Good co India in the United Arab Emirates seeks a Senior Security Architect to design enterprise security architectures across cloud, on‑prem, and applications, aligning with business goals and regulatory requirements. Lead security architecture for AWS, Azure, and Google Cloud, and drive DevSecOps across CI/CD pipelines.

You will mentor security engineers, perform threat modeling and risk analysis, define Zero Trust IAM strategies, and ensure compliance with ISO 27001, NIST, PCI DSS, and GDPR.

Qualifications

• Bachelor's degree or higher in a technical field and 8–13 years in cybersecurity/security architecture.
• Design and implement enterprise security architectures across cloud, hybrid, and on‑prem environments.
• Strong knowledge of cloud security across AWS, Azure, and Google Cloud Platform.
• Hands‑on with IAM, PAM, SSO, MFA, encryption, PKI, and identity governance.
• Solid understanding of networks, firewalls, WAF, VPN, IDS/IPS, and secure connectivity.

Responsibilities

• Design and define enterprise security architecture strategies aligned with business goals and regulations.
• Develop secure architecture frameworks, standards, policies, and governance models.
• Lead security architecture for cloud, hybrid, on‑prem, applications, and networks.
• Perform threat modeling, risk analysis, and architecture reviews for new and existing solutions.
• Design and implement security controls for identity, encryption, data protection, and network security.
• Architect cloud security solutions across AWS, Azure, and Google Cloud.
• Define Zero Trust, IAM, PAM, and identity governance strategies.
• Collaborate with infrastructure, cloud, DevOps, and compliance teams to embed security into solutions.
• Drive DevSecOps by integrating security into CI/CD and SDLC.

Skills

Cloud security

IAM & PAM

Zero Trust

Governance

Threat modeling

Compliance knowledge

SIEM/SOAR

Kubernetes security

DevSecOps

Vulnerability management

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

IBM QRadar

CrowdStrike

Palo Alto Networks

Fortinet

Check Point

Job description

Role & responsibilities

• Design and define enterprise security architecture strategies aligned with business objectives, regulatory requirements, and industry best practices.
• Develop secure architecture frameworks, security standards, policies, and governance models across enterprise environments.
• Lead security architecture design for cloud, hybrid, on-premises, applications, networks, and infrastructure platforms.
• Perform security assessments, threat modeling, risk analysis, and architecture reviews for new and existing solutions.
• Design and implement security controls for identity management, access control, encryption, network security, application security, and data protection.
• Architect cloud security solutions across AWS, Microsoft Azure, and Google Cloud environments.
• Define Zero Trust security models, IAM strategies, privileged access management (PAM), and identity governance solutions.
• Collaborate with infrastructure, cloud, DevOps, application development, and compliance teams to embed security into technology solutions.
• Drive DevSecOps adoption by integrating security practices into CI/CD pipelines and software development lifecycles.
• Evaluate security technologies, conduct proof of concepts (PoCs), and recommend solutions to improve security posture.
• Support vulnerability management, penetration testing, security monitoring, incident response, and threat mitigation initiatives.
• Design security solutions involving SIEM, SOAR, EDR, WAF, firewalls, IDS/IPS, DLP, and network security platforms.
• Ensure compliance with security frameworks and regulations including ISO 27001, NIST, CIS Controls, PCI DSS, and GDPR.
• Provide security architecture guidance during cloud migrations, digital transformation projects, and enterprise technology initiatives.
• Develop security architecture documentation, standards, risk reports, and technical design documents.
• Mentor security engineers and provide technical leadership across security initiatives.

Preferred candidate profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related technical discipline.
• 8 to 13 years of experience in Cybersecurity, Information Security, Security Engineering, or Security Architecture roles.
• Proven experience designing and implementing enterprise security architectures across cloud, hybrid, and on-premises environments.
• Strong knowledge of cloud security architecture across AWS, Microsoft Azure, and/or Google Cloud Platform.
• Hands-on experience with IAM, PAM, SSO, MFA, Zero Trust Architecture, encryption, PKI, and identity governance.
• Strong understanding of network security concepts including firewalls, WAF, VPN, IDS/IPS, segmentation, NAC, and secure connectivity.
• Experience with application security, secure SDLC, OWASP Top 10, API security, DevSecOps, and vulnerability management.
• Strong experience with security tools such as SIEM, SOAR, EDR, DLP, CSPM, vulnerability scanners, and security monitoring platforms.
• Experience with security technologies including Splunk, Microsoft Sentinel, IBM QRadar, CrowdStrike, Palo Alto Networks, Fortinet, and Check Point.
• Strong understanding of cybersecurity frameworks including NIST, ISO 27001, CIS Controls, PCI DSS, GDPR, and security risk management.
• Experience conducting threat modeling, security assessments, architecture reviews, and risk analysis.
• Knowledge of Kubernetes security, container security, Terraform security, cloud governance, and infrastructure security.
• Strong analytical, problem-solving, communication, stakeholder management, and leadership skills.
• Experience working with global teams, auditors, vendors, and business stakeholders.

Preferred certifications

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• CISM (Certified Information Security Manager)
• CISA
• SABSA Security Architect Certification
• TOGAF Certified
• AWS Certified Security Specialty
• Microsoft Certified: Cybersecurity Architect Expert
• Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• ISO 27001 Lead Implementer / Lead Auditor