Infrastructure Security Architect

CodeNinja Inc; Saudi Arabia; On-site; SAR 337,000 - 450,000; Full time

Job summary

A major banking institution in Saudi Arabia is looking for a highly skilled Infrastructure Security Architect. This senior-level role involves designing secure hybrid infrastructures, implementing security controls, and ensuring compliance with financial regulations. Ideal candidates should have deep expertise in infrastructure security and experience in banking. They will play a critical role in safeguarding the bank's digital assets within a hybrid cloud environment.

Qualifications

• Hands-on, senior-level role.
• Strong background in banking or regulated financial environments.
• Ability to define and implement secure architecture standards.

Responsibilities

• Design and maintain secure hybrid infrastructure architectures.
• Deploy and configure security controls for various systems.
• Ensure adherence to compliance standards and develop audit-ready documentation.

Skills

Deep technical expertise in infrastructure and cloud security

Experience in banking or regulated financial environments

Knowledge of security reference architectures

Experience with security monitoring and incident response

Tools

VMware

Kubernetes

Cloud-native security controls

SIEM

Job description

About the Role

We are seeking a highly skilled Infrastructure Security Architect to join the Architecture Unit of one of Saudi Arabia’s largest banks. This team is driving the design and protection of the bank’s hybrid infrastructure, spanning on-premises data centers, private cloud, and public cloud environments.

This is a hands-on, senior-level role requiring deep technical expertise in infrastructure and cloud security, with a strong background in banking or regulated financial environments. You will define, implement, and govern secure architecture standards that safeguard the bank’s critical systems and digital assets.

Key Responsibilities

Architecture & Strategy

• Design and maintain secure hybrid infrastructure architectures integrating on-prem, private cloud, and public cloud (OCI / Azure / GCP).
• Define security reference architectures, baseline configurations, and zero-trust network models.
• Collaborate with enterprise architects to ensure security-by-design across infrastructure initiatives.

Hands-On Implementation & Hardening

• Deploy and configure security controls for firewalls, WAF, IDS/IPS, DDoS protection, Email & API security gateways, VPN, NAC, endpoint protection, IAM, and SIEM solutions.
• Harden operating systems, databases, virtualization, and container environments.

Cloud & Virtualization Security

• Secure workloads across VMware, Hyper-V, and container platforms (Kubernetes, OpenShift).
• Integrate cloud-native security controls into multi-cloud environments.

Security Monitoring & Response

• Collaborate with SOC teams to enhance detection, alerting, and incident response.
• Integrate SIEM / SOAR tools for threat monitoring and correlation.
• Lead root-cause analysis and drive security remediation initiatives.

Compliance & Risk Management

• Ensure adherence to SAMA CSF, NCA ECC, SWIFT CSP, PCI DSS, and NIST standards.
• Develop audit-ready documentation, security blueprints, and policy frameworks.
• Conduct threat modeling and define risk mitigation strategies.