Senior Cyber Security Architect

Alftek International; Qatar; On-site; QAR 546,000 - 764,000; Full time

Job summary

Alftek International seeks a Senior Cyber Security Architect in Qatar to provide architecture assessments, security design and documentation across applications, cloud, data and infrastructure. The role is advisory and delivery‑oriented, with governance and knowledge transfer at its core.

Requirements include 10+ years in enterprise security within regulated environments and a senior certification such as CISSP or CISM.

Qualifications

• Bachelor’s degree in cyber security, computer science, or a related discipline.
• At least 10 years of cyber security experience in enterprise security architecture within regulated environments.
• CISSP, CISM or equivalent senior security certification required; SABSA/TOGAF advantageous.

Responsibilities

• Deliver security architecture priorities and support stakeholders across the engagement.
• Perform security architecture assessments across hybrid and multi‑cloud environments, applications, APIs and networks.
• Propose designs aligned with Zero Trust principles, including identity, least privilege and continuous verification.
• Prepare security architecture requirements for IAM, PAM, secrets management, cryptography and data protection.
• Assess emerging technologies (including AI/ML) and document risks with safeguards.
• Transfer knowledge through documentation, walkthroughs and handover sessions.

Skills

Security architecture

Threat modelling

Cloud security

IAM/PAM

Zero Trust

Data protection

Network security

API security

AI security

Regulatory knowledge

Security writing

Education

Bachelor’s degree in cyber security or related field

Postgraduate qualification is an advantage

Job description

We are seeking a Senior Cyber Security Architect in Qatar to provide experienced security architecture capacity on a consulting basis, supporting architecture assessments, solution reviews, security design and documentation across applications, infrastructure, cloud, data, identity and emerging technologies. The role is advisory and delivery-focused, working under the direction and governance of the organisation’s management, with knowledge transfer and reusable documentation as core outcomes. At least 10 years of cyber security experience, including enterprise security architecture in a highly regulated environment, and a senior-level security certification such as CISSP or CISM are mandatory for this position.

Key Responsibilities

Deliver assigned security architecture priorities and support stakeholders across the engagement

Perform security architecture assessments across on-premises, hybrid and multi-cloud environments, applications, APIs, platforms, networks, endpoints, data and third-party integrations

Propose designs aligned with Zero Trust principles, including strong identity, least privilege, continuous verification and explicit access decisions

Prepare security architecture requirements and design recommendations for IAM, PAM, secrets management, cryptography, key management, data protection, network security, endpoint security, application security and security monitoring

Assess emerging technologies, including generative AI and machine-learning solutions, and document data, model, identity, integration, misuse, third-party and regulatory risks with proposed safeguards

Recommend measures that support cyber resilience, including secure redundancy, recovery, immutable protection, segmentation, tested failover and incident containment

Identify and document architecture risks and control gaps, propose compensating controls and support remediation tracking

Apply approved, reusable and cost-effective security patterns, and provide evidence-based analysis of technology options including resilience, vendor dependency and total cost

Engage early with enterprise architects, project managers and technology teams to understand requirements, threat exposure and regulatory obligations

Develop and maintain reference designs, standards and reusable patterns, and produce complete deliverables, decision records and knowledge‑transfer materials in approved repositories

Transfer knowledge to designated personnel through documentation, walkthroughs, technical briefings and handover sessions

Compliance & Governance

Comply with all applicable laws, regulations, contractual obligations, policies and security requirements communicated for the engagement

Operate solely within the approved scope, access rights and instructions; architecture approval, risk acceptance and exceptions remain with authorised personnel

Immediately report security incidents, suspected data exposure, conflicts of interest, control breaches and material delivery risks through the designated channels

Complete all mandatory onboarding, security, privacy and compliance training before receiving or retaining access

Cooperate with audit, risk, compliance and regulatory evidence requests relating to the services performed

Maintain strict confidentiality of customer and internal information, and the professional certifications represented for the duration of the engagement

Mandatory Requirements

Bachelor’s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantage

At least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environment

Demonstrated experience with hybrid and multi‑cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security and cyber resilience

CISSP, CISM or an equivalent senior‑level security certification is required; SABSA, TOGAF, CCSP or major cloud‑provider security certifications are advantageous

Required Skills

Expert knowledge of enterprise security architecture, threat modelling, security control design and risk‑based decision‑making

Strong understanding of cloud shared‑responsibility models, container and orchestration security, APIs, modern authentication, privileged access, encryption and key management

Working knowledge of AI security risks, data governance, model and integration controls, and responsible adoption of generative AI

Ability to translate complex technical risks into clear business, executive, audit and regulatory language

Strong stakeholder management, negotiation, facilitation, presentation and technical writing skills

Sound judgement, professional integrity, independence and the ability to challenge constructively

Excellent written and spoken English; Arabic is an advantage

Working Arrangement

Based in Qatar, working on‑site, remotely or in a hybrid arrangement as specified in the engagement terms; travel may be required where explicitly approved

The consultant may coordinate assigned activities and provide technical guidance, but has no line‑management authority and no authority to approve designs, accept risk or commit expenditure