Cybersecurity & Network Security Designer - Damascus Based

Design and develop comprehensive cybersecurity and network security architectures for the Silklink Project telecom infrastructure. Responsible for creating security designs covering network perimeter protection, firewalls, intrusion prevention, DDoS mitigation, network access control, and security operations integration. Ensure all security designs protect the network infrastructure from cyber threats, comply with applicable security standards, and align with the overall network architecture strategy.

• Design end-to-end network security architectures including firewall zones, DMZ, and multi-layered security perimeters.
• Develop HLD and LLD for all security platforms, network security controls, and integration touchpoints.
• Define security baseline standards, device hardening guidelines, and access control policies.
• Design network segmentation strategies and zero-trust network design principles.
• Ensure security architecture alignment with overall core, transport, and access network designs.
• Design firewall policy frameworks, rule sets, and network access control list (ACL) architectures.
• Define security zone models, inter-zone communication policies, and service access control designs.
• Design network access control (NAC) and identity-based security enforcement models.
• Develop VPN and encrypted tunneling design models for management and operations traffic.
• Design DDoS protection and traffic scrubbing solutions at the IGW and internet-facing network layers.
• Develop DDoS detection, classification, and mitigation strategy designs.
• Define traffic rate-limiting, blackholing, and diversion mechanisms for volumetric attack mitigation.
• Coordinate DDoS protection architecture integration with international carriers and upstream providers.
• Design Intrusion Prevention System (IPS) and Intrusion Detection System (IDS) deployment architectures.
• Define threat detection rules, signature management, and behavioral anomaly detection strategies.
• Develop placement strategy for inline and out-of-band security monitoring sensors.
• Design SIEM integration and security logging, monitoring, and alerting architectures.
• Define security event correlation models, log aggregation strategies, and incident response workflows.
• Design security telemetry and Net Flow-based threat intelligence collection architectures.
• Ensure all security designs comply with ISO 27001, NIST Cybersecurity Framework, and telecom security standards.
• Conduct security risk assessments and threat modeling exercises for all network design domains.
• Develop security compliance matrices and validation frameworks for vendor design submissions.
• Document security design rationale, threat models, and risk mitigation approaches.

• Bachelor's or Master of Engineering in Cybersecurity, Telecommunications, or Computer Science.
• Minimum 8 years of experience in network security architecture design.
• Strong knowledge of firewall platforms, IPS/IDS, DDoS protection, and zero-trust frameworks.
• Experience with security design for telecom and carrier-grade network environments.
• Multi-vendor experience with leading security vendors (Cisco, Palo Alto, Juniper, Fortinet).
• Professional security certifications (CISSP, CCIE Security, or equivalent) are highly desirable.
• Good communication, documentation, and presentation skills.