Senior Security Architect: Cloud, Hybrid & Data Privacy

CPX; Abu Dhabi; On-site; AED 350,000 - 600,000; Full time

Job summary

CPX is seeking a Lead - Security Architect in Abu Dhabi to guide secure design across new initiatives, applications and cloud/hybrid platforms. You will lead architecture reviews, model threats, and translate security standards into concrete requirements, balancing risk, usability and delivery timelines.

The role requires extensive experience in enterprise security architecture, ISO/NIST frameworks and DevSecOps practices, with mentoring responsibilities across delivery teams.

Qualifications

• Strong knowledge of enterprise security architecture, risk management, threat modelling and security-by-design principles.
• Practical experience across cloud, on-premises and hybrid architectures.

Responsibilities

• Serve as the security architecture advisor for new initiatives, major changes, transformation programs and technology procurements within the client environment.
• Review proposed applications, platforms, infrastructure services, cloud services and emerging technologies before implementation or material change.
• Assess end-to-end solution architecture, including security controls, trust boundaries, data flows, interfaces, APIs, integration points, identity and access, network zones, hosting and deployment models.
• Translate client security standards, regulatory obligations and enterprise policies into clear, testable architecture and design requirements.
• Lead security architecture reviews and threat-modelling workshops with stakeholders.
• Define security architecture patterns, guardrails and reference designs covering identity, privileged access, segmentation, encryption, key management, API security, logging, monitoring, backup, resilience and secure administration.
• Evaluate third-party and SaaS solution designs, including data residency, tenant isolation, supplier access, integration security, shared-responsibility boundaries and exit considerations.
• Ensure privacy and data-protection requirements are considered by design, including data classification, minimization, retention, encryption, access restrictions and secure data exchange.
• Assess alignment with secure software development and DevSecOps practices, including secrets management, code and dependency security, CI/CD controls, environment segregation and release assurance.
• Define architecture-related security acceptance criteria and support validation before go-live.
• Maintain a traceable record of architecture decisions, risks, recommendations, waivers, compensating controls, owners and closure status.
• Support security governance forums by presenting material risks, design decisions, exceptions and recommended treatment options to relevant stakeholders.
• Contribute to continuous improvement of client security principles, architecture standards, reusable patterns, review checklists and assurance processes.
• Provide architecture guidance during security incidents, major vulnerabilities or material technology changes where design-level remediation is required.

Skills

Security architecture

Threat modelling

Risk management

Security-by-design

DevSecOps

ISO 27001

NIST CSF

NIST SP 800-53

Cloud security

Education

Bachelor's in Cybersecurity

Master's in Cybersecurity

Tools

IAM/PAM

CI/CD security

Job description

CPX is seeking a Lead - Security Architect in Abu Dhabi to guide secure design across new initiatives, applications and cloud/hybrid platforms. You will lead architecture reviews, model threats, and translate security standards into concrete requirements, balancing risk, usability and delivery timelines.

The role requires extensive experience in enterprise security architecture, ISO/NIST frameworks and DevSecOps practices, with mentoring responsibilities across delivery teams.