Job Description

### Education o General o Professional

• Bachelor's degree in a computer-related field such as computer science, cyber/information security discipline, physics, mathematics or similar
• Master's degree in business administration, information security, human resource management,
• Architecture: TOGAF/SABSA or similar
• Agile: Certified Scrum Master (CSM)
• General Information Security: CISSP, CISM/CISA or similar

### Experiences (Years & Type) o Industry o Regional o Functional

• Banking or e-Commerce Industry experience of at least 2-3 years is necessary.
• Experience in the regional sector is not necessary but will be desirable since Middle East regulations apply heavily.
• Must have a minimum 7-10 years of experience in an Infrastructure and Security function with good background in information technology, stakeholder management and people management.
• Minimum 3-5 years' experience, as an Infrastructure and Security Architect
• Minimum 3-5 years' experience as an Enterprise & Data Architect
• Prior experience managing a team of 3-5 individuals.
• Budgeting, creating slide decks and presentation skills.
• Certification in Azure or AWS is added advantage

### Knowledge & Skills o Technical o Functional o Managerial

• Define, Document and implement the infra & security architecture for the IT projects including but not limited to the following:
• Authentication & authorization
• Account administration controls (provisioning, segregation of duties, validation, attestation, etc.)
• Auditing of critical security related events
• Confidentiality, Integrity, and Availability of the system and data.
• The architect should have sound knowledge on enterprise level target architecture in On Premises, public and private cloud platforms (IaaS/PaaS)
• Good hands-on experience solutioning technology architectures that involve securing web and mobile applications, identity management integration, perimeter protection, core protection and end-point protection/detection & API /Micro services Security.
• Good knowledge of the concerns and threats that revolve around Cloud Security and how those concerns can be mitigated (Technical)
• Deep foundational knowledge, understanding and application on all aspects of Information Security concepts from broad range of technical and non- technical areas (Technical)The architect has the skill to follow design principles and applies design patterns to enforce maintainable, readable, and reusable patterns, in the form of code or otherwise.
• The architect can understand the application architecture and interpret potential issues found in source or compiled code.
• The architect has automation skills/capability in the form of scripting or similar.
• The architect can propose options for solutions to the security requirements / patterns that provide a balance of security, user experience & performance.
• The architect has the skill to discuss and present solutions to other architecture, security, development, and leadership teams.
• The architect can interpret and understand vulnerability assessment reports and calculate inherent and/or residual risks based on the assessment of such reports.
• Ability to articulate and be a persuasive leader who can serve as an effective member of the senior management team. Good negotiation skills will be desirable.
• Must have good judgment skills in order to decide on an exception approval.
• Ability to enforce improvements when necessary using Influence rather than Policing measures.
• Superior written and verbal communication skills in order to effectively communicate security threats and recommendations to technical or non-technical stakeholders.
• Knowledge of application of Agile methodologies/principles such as Scrum or Kanban





### Key Responsibilities

• Infrastructure design for various business & Technology Initiatives
• Acts as expert for infrastructure teams in the plan, design, and delivery of IT solutions
• Advises teams of IT technology standard requirements, methodology and processes.
• Maintenance of Policies & Standard Decisions for Infra Design
• Ensure delivery of cost effective & high-quality design within timelines of the project / initiative.
• Delivery and Maintenance of Infra model as design assets using design and architecture tools.
• Design of integrated solution for software defined datacentre
• Engage with partners & vendors to baseline Infra design decisions.
• Participates in proof of concepts to assist in defining technology direction and enabling business strategy.
• Manage relevant stakeholders & sign off authorities for closure and transition of design to provision.
• Acquire knowledge and take over design aspects of newly on boarded technologies in Infra.
• Review other domains of design such as application, services, and data to identify impact areas in Infra and Other domains
• Deploying Enterprise architecture on AWS / Azure
• Implementing AWS (or equivalent) services in variety of distributed computing environments
• Integration of AWS cloud service with on-premises systems.
• Migrating workloads from on-premises systems to AWS cloud using appropriate tools and technology
• Key Work-Related Tasks and Performance Indicators: -
• The Technical Architect needs to understand the IT landscape in detail from a capability standpoint.
• Aware of the Enterprise Architecture design principles
• Ensure 100% compliance to standards / principles set by Bank / Enterprise Architect in solution design
• Maintain high degree of Relationship and professional rapport with any IT / Partner / Business stakeholder being dealt with for the overall requirement.
• Deliver high quality specs and ensure 100% completeness of solution.
• Perform effective design reviews to ensure that no gaps are created in design.
• Design sustainable and high performing solution
• Provide Security solution on AWS and security best practices.
• Infrastructure capacity sizing, costing of AWS services to drive optimized solution architecture.
• monitoring and performance tuning of deployed applications on AWS.

Use appropriate tools and technologies for cloud management (monitoring, patching, backup, etc...)