Cybersecurity & Network Security Designer (Damascus)

About the role

The Cybersecurity & Network Security Designer will lead the design of secure telecom infrastructure for the Silklink Project in Damascus. You will create end‑to‑end security architectures, ensuring protection against cyber threats while complying with international standards.

Key responsibilities

• Design comprehensive network security architectures, including firewall zones, DMZ, and multi‑layered perimeters.
• Produce high‑level and low‑level designs (HLD/LLD) for firewalls, IPS/IDS, DDoS mitigation, NAC, VPN, and SIEM integration.
• Define security baseline standards, device hardening, access‑control policies, and zero‑trust segmentation strategies.
• Develop DDoS detection, classification, and mitigation designs, coordinating with carriers and upstream providers.
• Design intrusion detection and prevention deployments, threat‑detection rules, and behavioral analytics.
• Integrate security telemetry, NetFlow collection, and incident‑response workflows.
• Ensure all designs comply with ISO 27001, NIST Cybersecurity Framework, and telecom‑specific security standards.
• Conduct risk assessments, threat modeling, and produce compliance matrices for vendor submissions.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Telecommunications, Computer Science or related field.
• Minimum 8 years of experience designing network security architectures for telecom environments.
• Strong understanding of security standards and ability to produce detailed design documentation.

Required skills

• Firewall platforms
• Intrusion Prevention System (IPS) / Intrusion Detection System (IDS)
• DDoS protection and mitigation
• Zero‑trust network design and network segmentation
• Network Access Control (NAC)
• VPN and encrypted tunneling
• Security Information and Event Management (SIEM)
• NetFlow and security telemetry
• ISO 27001 and NIST Cybersecurity Framework