Senior Network & Security Architect

About the role

The Senior Network & Security Architect will lead the planning, design and governance of Omantel’s enterprise network and security architecture. Reporting to the Digital & Technology Unit, the role ensures that all network and cloud solutions are secure, scalable and aligned with the company’s digital transformation strategy and regulatory requirements.

Key responsibilities

• Design and maintain enterprise network architecture covering LAN, WAN, SD‑WAN, data‑centre and hybrid/multi‑cloud connectivity.
• Produce high‑level and low‑level designs (HLD/LLD) for all network infrastructure within the Digital & Technology domain.
• Define capacity planning, performance and availability standards to support current and future digital services.
• Govern campus, branch and remote‑access network designs ensuring resilience and scalability.
• Develop and maintain a Zero Trust and SASE‑based cybersecurity architecture framework.
• Architect network security controls such as NGFW, IDS/IPS, WAF, DDoS protection and network segmentation.
• Lead threat modelling, risk‑based design reviews and vulnerability assessments for new and existing platforms.
• Define IAM, PAM, PKI and data‑protection standards across enterprise and cloud environments.
• Establish Cloud Security Posture Management (CSPM) standards and oversee implementation across multi‑cloud deployments.
• Provide security architecture guidance for APIs, micro‑services, containerised workloads and embed security into DevSecOps pipelines.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Electrical Engineering or a related field (Master’s preferred).
• Minimum 8 years of professional experience, with at least 5 years in a dedicated network or security architecture role.

Required skills

• LAN, WAN, SD‑WAN, data‑centre networking.
• Hybrid and multi‑cloud connectivity design.
• Zero Trust and SASE principles.
• NGFW, IDS/IPS, WAF, DDoS protection, network segmentation.
• IAM, PAM, PKI, data‑protection mechanisms.
• Cloud security for IaaS, PaaS and SaaS environments.
• Cloud Security Posture Management (CSPM).
• API security, micro‑services and container security.
• DevSecOps integration.
• Familiarity with ISO 27001, NIST CSF, CIS Controls and regional regulatory frameworks.