Security Architect
First seen by Alion on Aug 4, 2026.
Role & Responsibilities :
- Design and implement enterprise security architecture aligned with business objectives, regulatory requirements, and industry best practices.
- Develop security architecture frameworks, standards, and reference models for applications, infrastructure, cloud, and network environments.
- Perform security reviews of enterprise solutions, applications, APIs, and infrastructure designs.
- Define and enforce security controls across cloud platforms (AWS/Azure/GCP), data centers, networks, and hybrid environments.
- Lead security architecture assessments, threat modeling, risk analysis, and mitigation planning.
- Design Zero Trust security models, identity and access management (IAM), privileged access management (PAM), and least-privilege frameworks.
- Collaborate with infrastructure, application development, DevOps, and business teams to embed security into technology initiatives.
- Provide security guidance for cloud migrations, digital transformation programs, and enterprise technology modernization.
- Review and approve security designs, architecture diagrams, technical standards, and solution proposals.
- Establish security patterns for applications, APIs, microservices, containers, and distributed systems.
- Define security requirements for vendors, third-party integrations, and managed service providers.
- Conduct security architecture gap assessments against frameworks such as ISO 27001, NIST CSF, CIS Controls, and industry regulations.
- Support incident response teams with architectural insights and root-cause analysis.
- Work with SOC teams to improve security monitoring, SIEM integration, threat detection, and response capabilities.
- Participate in cybersecurity governance forums and provide recommendations to senior leadership.
- Mentor security engineers and architects on design principles, controls, and best practices.
Preferred Candidate Profile :
Experience :
- 8 to 15 years of experience in cybersecurity, with significant experience in security architecture, enterprise security design, and risk management.
- Proven experience designing security solutions for large-scale enterprise environments.
- Experience working with organizations in banking, financial services, government, telecom, healthcare, or large enterprises is preferred.
- Experience leading security architecture reviews and advising technology stakeholders.
Strong knowledge of :
- Enterprise Security Architecture and Security Design Principles
- Cloud Security Architecture (AWS, Microsoft Azure, Google Cloud)
- Network Security Architecture (Firewalls, WAF, IDS/IPS, VPN, NAC)
- Identity Security (IAM, SSO, MFA, PAM, RBAC, Zero Trust)
- Application Security (API Security, Secure SDLC, DevSecOps)
- Data Security (Encryption, DLP, Data Classification, Key Management)
Soft Skills :
- Strong stakeholder management and communication skills.
- Ability to explain complex security concepts to technical and non-technical audiences.
- Strong analytical, problem-solving, and decision-making abilities.
- Experience working with CISO teams, enterprise architects, and business leaders.
- Ability to manage multiple security initiatives in a fast-paced environment.
UAE Market Preferences :
- Experience working in GCC/UAE organizations is an advantage.
- Familiarity with UAE cybersecurity regulations and frameworks such as :
1. UAE Information Assurance Standards (IAS)
2. Dubai Electronic Security Center (DESC) requirements
3. NESA/UAE cybersecurity guidelines
4. Regulatory requirements for banking and government sectors
- Experience with large transformation programs and multinational environments is highly valued.
Skills
Cyber Security, Security, Cloud Security, AWS, Azure, Google Cloud Platform, iAM, NIST, CIS, Security Operations Center, Security Architect