Senior Cyber Security Architect

Alftek International; Qatar; On-site; QAR 250,000 - 450,000; Full time

Job summary

Alftek International is seeking a Senior Cyber Security Architect in Qatar to provide architecture capacity on a consulting basis. The role focuses on assessments, design, and documentation across applications, infrastructure, cloud, data, identity, and emerging technologies.

Requires 10+ years in cyber security and senior certifications such as CISSP or CISM. The position emphasizes advisory and delivery-focused work, knowledge transfer, and reusable documentation under governance.

Qualifications

• Bachelor's degree in cyber security, computer science, computer engineering, information systems or a related discipline.
• At least 10 years of relevant tech and cyber security experience in highly regulated environments.
• Experience with hybrid/multi-cloud, Zero Trust, IAM/PAM, app/API security, data protection, network security, cyber resilience.
• CISSP or CISM or equivalent senior-level security certification; SABSA/TOGAF/CCSP advantageous.

Responsibilities

• Deliver security architecture priorities and support stakeholders across the engagement.
• Perform security architecture assessments across on-premises, hybrid, and multi-cloud environments.
• Propose designs aligned with Zero Trust and strong identity controls.
• Prepare security architecture requirements for IAM, data protection, and monitoring.
• Assess emerging technologies and document regulatory risks with safeguards.
• Develop reference designs and reusable patterns for knowledge transfer.

Skills

Enterprise security architecture

Threat modelling

Risk-based decisions

Cloud security

Zero Trust

IAM/PAM

API security

Data protection

Network security

Regulatory compliance

Education

Bachelor's degree in cyber security/CS/CE/IS

Postgraduate qualification preferred

Job description

Location Qatar Contract We are seeking a Senior Cyber Security Architect in Qatar to provide experienced security architecture capacity on a consulting basis supporting architecture assessments solution reviews security design and documentation across applications infrastructure cloud data identity and emerging technologies The role is advisory and delivery-focused working under the direction and governance of the organisation s management with knowledge transfer and reusable documentation as core outcomes At least 10 years of cyber security experience including enterprise security architecture in a highly regulated environment and a senior-level security certification such as CISSP or CISM are mandatory for this position

Key Responsibilities

• Deliver assigned security architecture priorities and support stakeholders across the engagement
• Perform security architecture assessments across on-premises hybrid and multi-cloud environments applications APIs platforms networks endpoints data and third-party integrations
• Propose designs aligned with Zero Trust principles including strong identity least privilege continuous verification and explicit access decisions
• Prepare security architecture requirements and design recommendations for IAM PAM secrets management cryptography key management data protection network security endpoint security application security and security monitoring
• Assess emerging technologies including generative AI and machine-learning solutions and document data model identity integration misuse third-party and regulatory risks with proposed safeguards
• Recommend measures that support cyber resilience including secure redundancy recovery immutable protection segmentation tested failover and incident containment
• Identify and document architecture risks and control gaps propose compensating controls and support remediation tracking
• Apply approved reusable and cost-effective security patterns and provide evidence-based analysis of technology options including resilience vendor dependency and total cost
• Engage early with enterprise architects project managers and technology teams to understand requirements threat exposure and regulatory obligations
• Develop and maintain reference designs standards and reusable patterns and produce complete deliverables decision records and knowledge-transfer materials in approved repositories
• Transfer knowledge to designated personnel through documentation walkthroughs technical briefings and handover sessions

Compliance amp Governance

• Comply with all applicable laws regulations contractual obligations policies and security requirements communicated for the engagement
• Operate solely within the approved scope access rights and instructions architecture approval risk acceptance and exceptions remain with authorised personnel
• Immediately report security incidents suspected data exposure conflicts of interest control breaches and material delivery risks through the designated channels
• Complete all mandatory onboarding security privacy and compliance training before receiving or retaining access
• Cooperate with audit risk compliance and regulatory evidence requests relating to the services performed
• Maintain strict confidentiality of customer and internal information and the professional certifications represented for the duration of the engagement

Mandatory Requirements

• Bachelor s degree in cyber security computer science computer engineering information systems or a related discipline a postgraduate qualification is an advantage
• At least 10 years of relevant technology and cyber security experience including substantial enterprise security architecture experience in banking financial services or another highly regulated environment
• Demonstrated experience with hybrid and multi-cloud architecture Zero Trust IAM PAM application and API security data protection network security and cyber resilience
• CISSP CISM or an equivalent senior-level security certification is required SABSA TOGAF CCSP or major cloud-provider security certifications are advantageous

Required Skills

• Expert knowledge of enterprise security architecture threat modelling security control design and risk-based decision-making
• Strong understanding of cloud shared-responsibility models container and orchestration security APIs modern authentication privileged access encryption and key management
• Working knowledge of AI security risks data governance model and integration controls and responsible adoption of generative AI
• Ability to translate complex technical risks into clear business executive audit and regulatory language
• Strong stakeholder management negotiation facilitation presentation and technical writing skills
• Sound judgement professional integrity independence and the ability to challenge constructively
• Excellent written and spoken English Arabic is an advantage
• Bachelor s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantageAt least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environmentDemonstrated experience with hybrid and multi-cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security, and cyber resilienceCISSP, CISM or an equivalent senior-level security certification is required; SABSA, TOGAF, CCSP or major cloud-provider security certifications are advantageous

Bachelor s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantageAt least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environmentDemonstrated experience with hybrid and multi-cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security, and cyber resilienceCISSP, CISM or an equivalent senior-level security certification is required; SABSA, TOGAF, CCSP or major cloud-provider security certifications are advantageous