Cybersecurity & Network Security Designer (Damascus)

About the role

We are seeking a senior Cybersecurity & Network Security Designer to lead the design of comprehensive security architectures for the Silklink Project telecom infrastructure in Damascus. The role will create and document security solutions that protect the network perimeter, data flows, and operational environments while complying with international standards.

Key responsibilities

• Design end‑to‑end network security architectures, including firewall zones, DMZ, and multi‑layered perimeters.
• Produce high‑level and low‑level design (HLD/LLD) documents for all security platforms and integration points.
• Define security baseline standards, device hardening guidelines, and access‑control policies.
• Develop network segmentation and zero‑trust designs, including NAC and identity‑based enforcement.
• Design firewall policy frameworks, ACLs, VPN and encrypted tunneling for management traffic.
• Architect DDoS detection, classification, mitigation and traffic‑scrubbing solutions.
• Specify IPS/IDS deployment, threat‑detection rules, and sensor placement strategies.
• Integrate SIEM solutions, define log aggregation, correlation models and incident‑response workflows.
• Ensure compliance with ISO 27001, NIST Cybersecurity Framework and telecom‑specific security standards.
• Conduct risk assessments, threat modelling and produce security compliance matrices for vendor designs.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Telecommunications, Computer Science or related field.
• Minimum 8 years of experience designing network security architectures for telecom environments.
• Deep knowledge of firewalls, IPS/IDS, DDoS mitigation, VPN, NAC and zero‑trust concepts.
• Proven experience with ISO 27001, NIST frameworks and telecom security standards.
• Strong documentation skills for HLD/LLD, risk assessments and compliance matrices.

Required skills

• Firewall platforms (e.g., Palo Alto Networks, Fortinet, Cisco ASA)
• IPS/IDS solutions
• DDoS mitigation technologies
• VPN and encrypted tunneling protocols
• Network Access Control (NAC) systems
• SIEM platforms (e.g., Splunk, QRadar)
• Network segmentation and zero‑trust design
• ISO 27001 and NIST Cybersecurity Framework
• HLD/LLD documentation
• NetFlow and security telemetry collection