Expert Engineer/Enterprise Security Architecture

Job Description

Responsibilities

• Develop, recommend, plan, design, and implement security controls to protect infrastructure services, following industry best practices and guidelines.
• Conduct comprehensive risk assessments for telecom and IT services (including 5G, 4G, 3G, MPLS, Internet, Cloud, NFVi, SDN, Data Centers, IoT, AI, IT, and IPTV), identifying threats, vulnerabilities, and impacts.
• Evaluate business and technical proposals, identify gaps in design and processes, and provide ideal security solutions.
• Perform security gap analysis across projects, applications, and vendors, and document remediation plans.
• Manage security vendors from selection through ongoing operations, including capacity planning of deployed security tools and solutions.
• Support, coordinate, and conduct quarterly risk assessments, engaging with multiple stakeholders and service owners.
• Develop policies, standards, and guidelines for telecom and IT services, including emerging technologies.
• Provide professional guidance and support to subordinates and project teams.
• Author RFIs, RFPs, and RFQs, liaising with vendors and suppliers to ensure financial and technical fit.
• Create security guidelines for services such as Mobile, IoT, and Cloud.
• Provide expert advice and support to infrastructure modernization and service owner projects.
• Prepare documentation and presentations related to security architecture and risk management.

Qualifications

• Bachelor’s degree in computer science, computer engineering, or cyber security.
• Minimum of 10 years of experience in the Cyber Security field, preferably in a telecom environment.
• In-depth knowledge of enterprise security architecture, network and infrastructure security, application security, cloud security, and security compliance.
• Strong understanding of security frameworks and standards (SIA, NIST, AI Risk Management Framework, ISO/IEC 27001, 3GPP, ITU, ETSI).
• Hands-on experience with virtualization technologies and related security requirements.
• Technical expertise in core telecom and IT infrastructure networks and services.
• Experience in developing policies, standards, and guidelines for telecom and IT services.
• Knowledge of advanced security tools and technologies (GRC, UTM, IPS/IDS, WAF, SIEM, IAM, PAM, DDoS, AEP, etc.), including AI/ML-based security solutions.
• Experience with vulnerability assessment and auditing tools.
• Strong decision-making skills in security strategy and planning.
• Excellent documentation and presentation skills.
• Relevant information security certifications such as CISSP, CISM, CRISC, CEH, GRC.