Cybersecurity & Network Security Designer (Damascus)

About the role

We are looking for a senior Cybersecurity & Network Security Designer to lead the security architecture for the Silklink Project telecom infrastructure in Damascus. The role focuses on creating robust, standards‑aligned designs that protect the network perimeter, data flows, and operational services from cyber threats.

Key responsibilities

• Design end‑to‑end network security architectures, including firewall zones, DMZ, and multi‑layered perimeters.
• Produce high‑level and low‑level design documents for security platforms, controls, and integration points.
• Define security baselines, device hardening, access‑control policies, and zero‑trust segmentation strategies.
• Develop firewall policy frameworks, ACLs, NAC and identity‑based enforcement models.
• Design VPN, encrypted tunneling, DDoS mitigation, traffic‑scrubbing, and detection strategies.
• Specify IPS/IDS deployment, threat‑detection rules, and sensor placement.
• Architect SIEM integration, log aggregation, security event correlation, and NetFlow‑based threat intelligence.
• Ensure compliance with ISO 27001, NIST Cybersecurity Framework and telecom security standards.
• Conduct risk assessments, threat modeling, and create compliance matrices for vendor designs.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Telecommunications, Computer Science or related field.
• Minimum 8 years of experience designing network security architectures.
• Proven ability to work independently and align security designs with overall network strategy.

Required skills

• Firewall platforms
• Intrusion Prevention System (IPS) and Intrusion Detection System (IDS)
• DDoS protection and mitigation techniques
• Zero‑trust network design and network segmentation
• Network Access Control (NAC) and identity‑based enforcement
• VPN and encrypted tunneling design
• Security Information and Event Management (SIEM) integration
• NetFlow and security telemetry collection
• ISO 27001 and NIST Cybersecurity Framework compliance
• Telecom security standards