📍 Location: Qatar · Contract

We are seeking a Senior Cyber Security Architect in Qatar to provide experienced security architecture capacity on a consulting basis, supporting architecture assessments, solution reviews, security design and documentation across applications, infrastructure, cloud, data, identity and emerging technologies. The role is advisory and delivery-focused, working under the direction and governance of the organisation’s management, with knowledge transfer and reusable documentation as core outcomes. At least 10 years of cyber security experience, including enterprise security architecture in a highly regulated environment, and a senior-level security certification such as CISSP or CISM are mandatory for this position.

Key Responsibilities

• Deliver assigned security architecture priorities and support stakeholders across the engagement

• Perform security architecture assessments across on-premises, hybrid and multi-cloud environments, applications, APIs, platforms, networks, endpoints, data and third-party integrations

• Propose designs aligned with Zero Trust principles, including strong identity, least privilege, continuous verification and explicit access decisions

• Prepare security architecture requirements and design recommendations for IAM, PAM, secrets management, cryptography, key management, data protection, network security, endpoint security, application security and security monitoring

• Assess emerging technologies, including generative AI and machine-learning solutions, and document data, model, identity, integration, misuse, third-party and regulatory risks with proposed safeguards

• Recommend measures that support cyber resilience, including secure redundancy, recovery, immutable protection, segmentation, tested failover and incident containment

• Identify and document architecture risks and control gaps, propose compensating controls and support remediation tracking

• Apply approved, reusable and cost-effective security patterns, and provide evidence-based analysis of technology options including resilience, vendor dependency and total cost

• Engage early with enterprise architects, project managers and technology teams to understand requirements, threat exposure and regulatory obligations

• Develop and maintain reference designs, standards and reusable patterns, and produce complete deliverables, decision records and knowledge-transfer materials in approved repositories

• Transfer knowledge to designated personnel through documentation, walkthroughs, technical briefings and handover sessions

Compliance & Governance

• Comply with all applicable laws, regulations, contractual obligations, policies and security requirements communicated for the engagement

• Operate solely within the approved scope, access rights and instructions; architecture approval, risk acceptance and exceptions remain with authorised personnel

• Immediately report security incidents, suspected data exposure, conflicts of interest, control breaches and material delivery risks through the designated channels

• Complete all mandatory onboarding, security, privacy and compliance training before receiving or retaining access

• Cooperate with audit, risk, compliance and regulatory evidence requests relating to the services performed

• Maintain strict confidentiality of customer and internal information, and the professional certifications represented for the duration of the engagement

Mandatory Requirements

• Bachelor’s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantage

• At least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environment

• Demonstrated experience with hybrid and multi-cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security and cyber resilience

• CISSP, CISM or an equivalent senior-level security certification is required; SABSA, TOGAF, CCSP or major cloud-provider security certifications are advantageous

Required Skills

• Expert knowledge of enterprise security architecture, threat modelling, security control design and risk-based decision-making

• Strong understanding of cloud shared-responsibility models, container and orchestration security, APIs, modern authentication, privileged access, encryption and key management

• Working knowledge of AI security risks, data governance, model and integration controls, and responsible adoption of generative AI

• Ability to translate complex technical risks into clear business, executive, audit and regulatory language

• Strong stakeholder management, negotiation, facilitation, presentation and technical writing skills

• Sound judgement, professional integrity, independence and the ability to challenge constructively

• Excellent written and spoken English; Arabic is an advantage

Working Arrangement

• Based in Qatar, working on-site, remotely or in a hybrid arrangement as specified in the engagement terms; travel may be required where explicitly approved

• The consultant may coordinate assigned activities and provide technical guidance, but has no line-management authority and no authority to approve designs, accept risk or commit expenditure

To apply, please send your CV to hr@alftek.com with the role title in the subject line.