Cyber Security Architect

NourNet; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

NourNet is seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This on-site role ensures projects follow secure-by-design standards and regulatory requirements.

You will lead security architecture reviews, develop patterns, and integrate security into DevSecOps, working with SOC, GRC, and EA teams to govern solution designs.

Qualifications

• 7+ years of experience in security architecture and enterprise security frameworks.
• Strong expertise in cloud security (OCI preferred), microservices, API security, and data protection.
• Deep knowledge of network segmentation, IAM, encryption, and secure third‑party integration.
• Experience integrating security into DevOps/CI-CD pipelines.
• Strong documentation and architectural governance discipline.

Responsibilities

• Conduct security architecture reviews for new projects and cloud deployments.
• Develop and maintain enterprise security design patterns and reference architectures.
• Define secure configurations for OCI services, IAM models, and key management.
• Embed security controls into CI/CD pipelines (SAST, dependency scanning, container security).
• Evaluate and select security technologies ensuring architectural alignment.
• Collaborate with SOC, GRC, and Enterprise Architecture teams on governance.
• Participate in architecture review boards and document decisions and risks.
• Produce architecture review reports, diagrams, and design rationales.

Skills

Security architecture

Cloud security

IAM

Encryption

API security

Data protection

DevOps integration

Architecture governance

Documentation

Job description

we are seeking an experienced Security Architecture Analyst to join their cybersecurity and enterprise architecture function in Riyadh. This is a fully on‑site role supporting secure‑by‑design governance across cloud and on‑prem environments.

Role Summary

The Security Architecture Analyst will ensure that all technology projects and platforms follow approved security architecture standards, secure‑by‑design principles, and regulatory requirements. The role requires deep expertise in cloud security patterns, secure design reviews, and enterprise‑grade architecture governance.

Key Responsibilities

• Security Architecture Reviews - Conduct security architecture assessments for new projects, major changes, and cloud deployments (OCI, microservices, APIs, data platforms).
• Secure Design Patterns - Develop and maintain enterprise security design patterns and reference architectures covering network segmentation, IAM, encryption, API security, and data protection.
• Cloud Security Architecture - Define secure configurations for OCI services, including identity models, network security groups, encryption, and key management.
• DevSecOps Integration - Embed security controls into CI/CD pipelines (SAST, dependency scanning, container security, IaC validation).
• Technology Evaluation - Support evaluation and selection of security technologies and ensure architectural alignment.
• Cross‑Functional Collaboration - Work with SOC, GRC, and Enterprise Architecture teams to ensure monitoring and governance requirements are built into solution designs.
• Architecture Governance - Participate in architecture review boards and document decisions, risks, and required design adjustments.
• Documentation & Reporting - Produce high‑quality architecture review reports, diagrams, and design rationales.

Minimum Experience & Qualifications

• 7+ years of experience in security architecture, secure‑by‑design reviews, and enterprise security frameworks.
• Strong expertise in cloud security (preferably OCI), microservices, API security, and data protection.
• Deep knowledge of network segmentation, IAM, encryption, and secure third‑party integration.
• Experience integrating security into DevOps/CI‑CD pipelines.
• Strong documentation and architectural governance discipline.

Preferred Certifications

• Cloud security certifications (OCI, AWS, Azure)
• SABSA, TOGAF, CCSK, CCSP, or equivalent architecture/security certifications

Work Model

On‑site in Riyadh Due to the sensitivity of architecture governance and secure‑by‑design processes, this role requires full on‑site presence