Cyber Security Architect / Expert - KSA (Onsite) Job ID: 394976

Arab Solutions; Riyadh; On-site; SAR 350,000 - 600,000; Full time

Job summary

Arab Solutions in Saudi Arabia is seeking a Cyber Security Architect with 10+ years of experience to define and govern security across cloud, data, applications and integrations. The role is onsite in the KSA for a one-year engagement.

You will configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, WAF, and Defender, while leading SAST/DAST, VA/PT, and security testing efforts and coordinating remediation with development teams.

Qualifications

• 10+ years of cybersecurity experience.
• Secure-by-design principles across app, data, cloud and integration layers.
• Experience configuring and managing identity, access, and cloud security controls.

Responsibilities

• Define security architecture, controls, identity, access and risk mitigation.
• Ensure secure-by-design solution designs across layers.
• Configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, and WAF.
• Coordinate SAST/DAST/VA/PT assessments and track remediation.

Skills

Azure security

DevSecOps

Vulnerability testing

SIEM/SOAR

RBAC/PIM

Tools

Burp Suite

Nessus

OWASP

Microsoft Sentinel

Key Vault

Job description

Job Role: Cyber Security Architect / Expert

Experience: 10+ years

Location: KSA (Onsite)

Duration: 1 year

Technology Stack:

Azure Security Architecture & Engineering: Entra ID, APIM, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Microsoft Fabric/Purview, Azure DevOps security pipelines, API and microservices security, IoT security, and GenAI security.

Security Assessment & Detection: Sentinel/KQL, Burp Suite, Nessus, SAST/DAST/SCA tools, OWASP web, API, and mobile security, and security scripting.

Job description:

Define security architecture, controls, identity, access, compliance and risk mitigation requirements.Ensure solution design follows secure-by-design principles across application, data, cloud and integration layers.

Configure Entra ID, MFA, Conditional Access, RBAC/PIM, Key Vault, WAF, Firewall, private endpoints, Defender and Sentinel. Execute or coordinate SAST, DAST, VA/PT, API and configuration assessments, track remediation and retest fixes.

Technical Skills Summary:

Security configuration, DevSecOps, vulnerability testing, SIEM/SOAR, evidence collection and operational security.

Functional Skills Summary:

Security Architecture & Governance:

Define target architecture, security controls, risk mitigation measures, compliance alignment, access governance, and secure-by-design reviews, ensuring adherence to applicable NCA, PDPL, NDMO, and DGA requirements.

Platform Engineering & Operations:

Build and operate environments, automate deployments, manage releases, and ensure monitoring, reliability, performance, and operational readiness.