About the Role
The Security Architect defines and assures the security architecture, secure-design principles, standards, and roadmaps that protect Fusion Integrated Solutions’ (FIS) customer and internal environments. The role provides technical leadership across cloud, network, identity, application, data, endpoint, and operational-technology security, translating business and regulatory requirements into practical, resilient security designs.
Aligned to SFIA Level 5, the successful candidate will lead architecture assurance and guide project, engineering, delivery, and customer teams on risk reduction, resilience, compliance, and secure implementation. The role combines cross-domain security expertise with sound technical judgement, balancing protection, operational needs, cost, and delivery priorities.
Responsibilities
- Define security reference architectures, design principles, technical standards, and roadmaps for FIS solutions and services.
- Lead secure-by-design reviews for cloud, network, identity, application, data, endpoint, and operational-technology environments.
- Design and assure Zero Trust controls, identity and access management (IAM), privileged access management (PAM), encryption, key management, segmentation, and secure connectivity.
- Perform or guide threat modelling, security risk assessments, architecture risk treatment, and security-control selection for customer solutions and internal platforms.
- Establish security patterns and guardrails for cloud and hybrid environments, including workload protection, logging, monitoring, vulnerability remediation, backup, and resilience requirements.
- Advise solution, engineering, and delivery teams on security requirements, design decisions, technology selection, and implementation priorities.
- Ensure architecture alignment with applicable standards and customer obligations, including ISO 27001, NIST, PCI DSS, and relevant Qatar regulatory or contractual controls where applicable.
- Produce and maintain architecture documents, security requirements, design-review records, risk registers, reference designs, and technical governance artefacts.
- Support security transformation initiatives, post-incident reviews, major customer proposals, and technical due diligence where security architecture expertise is required.
- Engage with customers, technology vendors, and internal stakeholders to communicate security risks, recommendations, trade-offs, and implementation roadmaps clearly.
Candidate Attributes
- A strong security-architecture mindset, balancing protection, operational resilience, customer needs, cost, and delivery timelines.
- Demonstrable knowledge across identity, cloud, network, endpoint, application, and data-security domains.
- Ability to analyse complex technical and business risks and translate them into clear, implementable controls and architecture decisions.
- Confident technical leadership and communication skills for design reviews, stakeholder workshops, and executive-level discussions.
- Strong documentation discipline and a collaborative approach to working with delivery, engineering, operations, vendors, and customers.
Education and Experience
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical discipline.
- 7+ years of relevant experience in security architecture, senior security engineering, cybersecurity consulting, or complex secure-solution design.
- Proven experience developing or assuring secure architectures in enterprise, systems-integration, managed-service, regulated, government, financial-services, energy, or comparable environments.
- Hands-on knowledge of Zero Trust, IAM/PAM, encryption, cloud security, network security, application security, threat modelling, risk assessment, and architecture governance.
- Professional certifications such as CISSP, CISM, CCSP, SABSA, security/cloud-vendor architecture certifications, or equivalent role-aligned credentials are preferred.
- Fluency in English is mandatory; Arabic is desirable.