Security Architect

Job Description

• Align Solution Design with Enterprise Strategy

• Ensure security architecture aligns with enterprise risk appetite, regulatory obligations, and zero-trust strategy across infrastructure and cloud.

• Deliver Comprehensive Solutions Design Artefacts

• Deliver HLD/MLD, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, data protection/DLP, key management/HSM, and PAM/IGA.

• Define and Evolve Architecture Design Patterns

• Define security reference architectures and control standards mapped to frameworks (e.g., NIST, ISO 27001) codify guardrails, detection-as-code, and hardening baselines.

• Deep Domain Expertise with Agility

• Deep expertise in identity-centric security, zero trust, micro-segmentation, encryption, secrets management, vulnerability/threat management, and application of DevSecOps.

• Collaborate and Govern Effectively

• Lead architecture risk assessments and threat modeling govern exceptions and technical debt remediation with clear risk narratives.

• Hands-On Engagement with Delivery Teams

• Embed with delivery and operations to ensure secure-by-default implementations, blue/green controls, and effective runbooks/IR playbooks.

• Provide Expert Guidance and Support

• Advise on compliance (e.g., MAS TRM/PCI-DSS/PDPA/GDPR), pen-test remediation, and security posture management mentor teams on secure design.

Qualifications

• 10+ years in security architecture or engineering covering on-prem and cloud.

• Practical experience with SIEM/SOAR, EDR/NDR, WAF, DDoS protection, data security (DLP, tokenization), KMS/HSM, and certificate/PKI.

• Identity and access controls across workforce and workload identities zero-trust patterns, micro-segmentation, and ZTNA.

• DevSecOps, threat modeling, and security testing integration into CI/CD.

• Familiarity with risk and control frameworks (NIST CSF, ISO 27001) and regional regulations (e.g., MAS TRM) as applicable.

• Ability to produce reference architectures, standards, and executable guardrails/policies-as-code.

• Certifications such as CISSP, CCSP, SABSA, or CISM are advantageous.