Cybersecurity & Network Security Designer - Damascus Based

Norconsult Telematics; Riyadh; On-site; SAR 280,000 - 460,000; Full time

Job summary

Norconsult Telematics seeks a seasoned Network Security Architect to design and implement comprehensive security architectures for telecom infrastructure. You will develop end-to-end security designs covering perimeter protection, zero-trust concepts, risk assessments, and security operations alignment.

The role requires 8+ years in network security architecture, strong experience with firewall platforms, IPS/IDS, DDoS protection, and carrier-grade environments.

Qualifications

• Bachelor's or Master in Engineering related to cybersecurity/telecommunications.
• 8+ years in network security architecture design.
• Strong knowledge of firewall platforms, IPS/IDS, DDoS protection.
• Experience in telecom/carrier-grade environments.
• Multi-vendor familiarity with Cisco, Palo Alto, Juniper, Fortinet.

Responsibilities

• Design end-to-end network security architectures including perimeters.
• Develop HLD/LLD for security platforms and touchpoints.
• Define baselines, device hardening, and access policies.
• Apply zero-trust network design principles across the network.
• Coordinate with carriers and providers on DDoS protection.
• Design IPS/IDS deployment and secure rule frameworks.
• Create SIEM integration, logging, monitoring, alerting architectures.
• Document threat models, risk mitigation and rationale.

Skills

Network security design

Zero-trust concepts

Threat modeling

Security standards

Security architecture

Education

Bachelor's or Master in Cybersecurity, Telecom, or CS

Tools

Cisco

Palo Alto

Juniper

Fortinet

Job description

Design and develop comprehensive cybersecurity and network security architectures for the Silklink Project telecom infrastructure. Responsible for creating security designs covering network perimeter protection, firewalls, intrusion prevention, DDoS mitigation, network access control, and security operations integration. Ensure all security designs protect the network infrastructure from cyber threats, comply with applicable security standards, and align with the overall network architecture strategy.

Job Description & Responsibilities:

• Design end-to-end network security architectures including firewall zones, DMZ, and multi-layered security perimeters.
• Develop HLD and LLD for all security platforms, network security controls, and integration touchpoints.
• Define security baseline standards, device hardening guidelines, and access control policies.
• Design network segmentation strategies and zero-trust network design principles.
• Ensure security architecture alignment with overall core, transport, and access network designs.
• Design firewall policy frameworks, rule sets, and network access control list (ACL) architectures.
• Define security zone models, inter-zone communication policies, and service access control designs.
• Design network access control (NAC) and identity-based security enforcement models.
• Develop VPN and encrypted tunneling design models for management and operations traffic.
• Design DDoS protection and traffic scrubbing solutions at the IGW and internet-facing network layers.
• Develop DDoS detection, classification, and mitigation strategy designs.
• Define traffic rate-limiting, blackholing, and diversion mechanisms for volumetric attack mitigation.
• Coordinate DDoS protection architecture integration with international carriers and upstream providers.
• Design Intrusion Prevention System (IPS) and Intrusion Detection System (IDS) deployment architectures.
• Define threat detection rules, signature management, and behavioral anomaly detection strategies.
• Develop placement strategy for inline and out-of-band security monitoring sensors.
• Design SIEM integration and security logging, monitoring, and alerting architectures.
• Define security event correlation models, log aggregation strategies, and incident response workflows.
• Design security telemetry and NetFlow-based threat intelligence collection architectures.
• Ensure all security designs comply with ISO 27001, NIST Cybersecurity Framework, and telecom security standards.
• Conduct security risk assessments and threat modeling exercises for all network design domains.
• Develop security compliance matrices and validation frameworks for vendor design submissions.
• Document security design rationale, threat models, and risk mitigation approaches.

Qualifications & Experience:

• Bachelor's or Master of Engineering in Cybersecurity, Telecommunications, or Computer Science.
• Minimum 8 years of experience in network security architecture design.
• Strong knowledge of firewall platforms, IPS/IDS, DDoS protection, and zero-trust frameworks.
• Experience with security design for telecom and carrier-grade network environments.
• Multi-vendor experience with leading security vendors (Cisco, Palo Alto, Juniper, Fortinet).
• Professional security certifications (CISSP, CCIE Security, or equivalent) are highly desirable.
• Good communication, documentation, and presentation skills.