Lead Technical Architect (Platform NFR & Security)

About the Role

An exciting opportunity to join the Qatar Airways IT - Technology Services team as Lead Technical Architect (Platform, Security - NFR). This role will serve as the lead architect, guiding the strategic direction for secure and seamless application connectivity across the enterprise. Your leadership will ensure that organizational data and applications remain protected, all application integrations meet the highest standards of security and compliance and application NFR adhere to the standards set. By fostering a culture of proactive risk management and reliability, you will enable the organization to confidently deliver innovative solutions compliant with QR security standards.

Your duties would include:

• Lead the organization roadmap and own the best practices to be adopted by application teams to improvise the overall security posture of QR applications.

• Act as product owner for enterprise platforms .Own the platform roadmap, feature adoption, onboarding sequence and entitlement policies.
• Define and govern platform standards across Azure and GCP, including subscription and project structure, configuration baselines, deployment architecture, in line with CyberGRC policies
• Establish and lead FinOps practices across platforms, including cost visibility, tagging, budgeting and forecasting, showback and chargeback to consuming business units, rightsizing, commitment and discount optimization, and license utilization tracking.
• Own the end-to-end platform lifecycle (onboarding, SLA and performance, capacity headroom, change and release governance), working with Technology Services (operate), CyberGRC (govern) and Vendor Management Office (contracts and renewals).
• Drive platform adoption and enablement across application teams, and measure usage, value and return on investment.

• Lead, mentor and set direction for the platform team, including platform architects, DevOps engineers and program management.

• Ensure application deployment and connectivity architecture is robust to ensure protection of QR data and compliance with QR policies.

• Ensure security of mobility solutions on personal / MDM devices is aligned with industry best practices and ensure consistent implementation across enterprise.

• Review and ensure all east-west traffic between applications is honoring the QR standards with respect to encryption and data protection.

• Establish organizational strategy for maintenance, management of security certificates used across the enterprise at different layers (apps, servers etc.), with minimal cost and operational overheads.

• Lead deep dive trouble shooting for any complex production issues around network, proxy, firewall, security incidents.

• Lead the organization strategy in handling and management of secrets stored within application servers.

• Ensure solutions proposed are optimized taking into consideration cost & operational overheads.

• Work closely with QR cyber governance team to refine the security guidelines on ongoing basis to ensure QR IT applications are aligned with the best industry practices.

• Establish and maintain an enterprise NFR framework covering availability, reliability, performance, scalability, observability, maintainability, auditing, and security.

• Define measurable NFR KPIs, SLAs, and SLOs across critical platforms (e.g., web, mobile, API, data, AI workloads).

• Assess and define reference architecture and NFR patterns for multi-cloud, hybrid, and distributed systems (e.g., Azure, GCP, Oracle, Adobe & OnPrem).

• Architect observability solutions using tools like Dynatrace, Prometheus, Grafana, and Azure Monitor.

• Define load, stress testing strategy, and ensure performance validations using tools such as k6, JMeter or Galing.

• Integrate NFR design principles with data privacy and encryption frameworks (BYOK, Fortanix, Azure Key Vault, TDE)

• Ensure systems meet compliance and audit requirements for data residency, logging, and access control.

• Validate secure integration practices for APIs, event streams, and third-party connectors (APIM, Apigee, MuleSoft, Solace, IBMMQ)

• Collaborate with testing and QA teams to define performance acceptance criteria.

• Establish performance baselines and capacity planning model for mission critical systems.

Be part of an extraordinary story

Your skills. Your imagination. Your ambition. Here, there are no boundaries to your potential and the impact you can make.You’ll find infinite opportunities to grow and work on the biggest, most rewarding challenges that will build your skills and experience. You have the chance to be a part of our future, and build the life you want while being part of an international community.

Our best is here and still to come. To us, impossible is only a challenge. Join us as we dare to achieve what’s never been done before.

Together, everything is possible.