Cybersecurity & Network Security Designer

About the role

The Cybersecurity & Network Security Designer will lead the design of robust security architectures for the Silklink Project telecom infrastructure. Based in Damascus, you will ensure that all network components are protected against cyber threats and comply with international security standards.

Key responsibilities

• Design end‑to‑end network security architectures, including firewall zones, DMZ, and multi‑layered perimeters.
• Create high‑level (HLD) and low‑level (LLD) designs for security platforms, controls, and integration points.
• Define security baseline standards, device hardening guidelines, and access‑control policies.
• Develop network segmentation and zero‑trust design principles.
• Design firewall policy frameworks, rule sets, and ACL architectures.
• Architect VPN, encrypted tunneling, DDoS protection, traffic scrubbing, and mitigation strategies.
• Specify IPS/IDS deployment, threat‑detection rules, and behavioral anomaly detection.
• Integrate SIEM solutions, define logging, monitoring, and incident‑response workflows.
• Ensure compliance with ISO 27001, NIST Cybersecurity Framework, and telecom security standards.
• Conduct security risk assessments, threat modeling, and produce compliance matrices.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Telecommunications, or Computer Science.
• Minimum 8 years of experience in network security architecture design.
• Strong knowledge of firewall platforms, IPS/IDS, DDoS protection, and zero‑trust concepts.
• Proven ability to work with telecom network designs and international carrier integrations.

Required skills

• Firewall platforms (e.g., Palo Alto, Fortinet)
• IPS/IDS solutions
• DDoS protection technologies
• Zero‑trust network design
• Network segmentation
• VPN and encrypted tunneling
• SIEM integration
• ISO 27001 compliance
• NIST Cybersecurity Framework
• Telecom security standards
• HLD/LLD design documentation
• Device hardening and security baselines
• Access‑control policy creation
• Network Access Control (NAC)
• Identity‑based security enforcement
• Traffic rate‑limiting, blackholing, diversion mechanisms
• Threat detection rule creation
• Signature management
• Behavioral anomaly detection
• Security telemetry and NetFlow collection
• Security logging, monitoring, and alerting
• Incident‑response workflow design
• Security risk assessment and threat modeling