Senior Network Security Architect: Zero-Trust & DDoS

Norconsult Telematics; Riyadh; On-site; SAR 280,000 - 460,000; Full time

Job summary

Norconsult Telematics seeks a seasoned Network Security Architect to design and implement comprehensive security architectures for telecom infrastructure. You will develop end-to-end security designs covering perimeter protection, zero-trust concepts, risk assessments, and security operations alignment.

The role requires 8+ years in network security architecture, strong experience with firewall platforms, IPS/IDS, DDoS protection, and carrier-grade environments.

Qualifications

• Bachelor's or Master in Engineering related to cybersecurity/telecommunications.
• 8+ years in network security architecture design.
• Strong knowledge of firewall platforms, IPS/IDS, DDoS protection.
• Experience in telecom/carrier-grade environments.
• Multi-vendor familiarity with Cisco, Palo Alto, Juniper, Fortinet.

Responsibilities

• Design end-to-end network security architectures including perimeters.
• Develop HLD/LLD for security platforms and touchpoints.
• Define baselines, device hardening, and access policies.
• Apply zero-trust network design principles across the network.
• Coordinate with carriers and providers on DDoS protection.
• Design IPS/IDS deployment and secure rule frameworks.
• Create SIEM integration, logging, monitoring, alerting architectures.
• Document threat models, risk mitigation and rationale.

Skills

Network security design

Zero-trust concepts

Threat modeling

Security standards

Security architecture

Education

Bachelor's or Master in Cybersecurity, Telecom, or CS

Tools

Cisco

Palo Alto

Juniper

Fortinet

Job description

Norconsult Telematics seeks a seasoned Network Security Architect to design and implement comprehensive security architectures for telecom infrastructure. You will develop end-to-end security designs covering perimeter protection, zero-trust concepts, risk assessments, and security operations alignment.

The role requires 8+ years in network security architecture, strong experience with firewall platforms, IPS/IDS, DDoS protection, and carrier-grade environments.