Network Security (L3) Architect

Company Description SAT Microsystems is an established IT service provider delivering innovative solutions that reduce business costs and complexity across Saudi Arabia, the UAE, and multiple other countries. Hundreds of organizations worldwide rely on SAT Microsystems to secure, manage, and support their IT operations, giving the company deep visibility into emerging technologies and industry trends. Its portfolio spans managed IT services, infrastructure support, database and application solutions, desktop support, cyber security services (SOC), and IT outsourcing. SAT Microsystems also offers advanced capabilities in cloud services, NOC operations, AI, automation, IoT, RPA, chatbots, and business process outsourcing (BPO). The company focuses on helping clients drive digitalization to new levels of efficiency, security, and innovation.

Role Description This is a full-time remote role for a Network Security (L3) Architect. The architect will design and validate advanced network and security architectures, ensuring alignment with industry best practices and organizational security policies. Daily responsibilities include performing in-depth security assessments, defining secure network configurations, and developing high-level and low-level design documents for complex environments. The role involves collaborating with cross-functional teams to implement security controls, troubleshoot L3 network and security issues, and optimize performance and resilience. The architect will also participate in security incident reviews, contribute to standards and guidelines, and provide technical leadership and mentoring to engineering and operations teams.

Qualifications

• Strong expertise in Security Architecture Design and Cybersecurity, including the ability to create scalable, secure solutions for complex enterprise environments.
• Hands-on experience with Network Security and Information Security, covering firewalls, VPNs, IDS/IPS, secure remote access, and security governance practices.
• Advanced knowledge of Network Architecture, including routing, switching, L3 protocols, segmentation, and high-availability design.
• Practical experience with security frameworks and standards (e.g., ISO 27001, NIST, CIS Controls) and familiarity with compliance requirements.
• Proficiency with enterprise security and networking technologies (such as next-generation firewalls, SIEM/SOC tools, load balancers, and cloud networking/security services).
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field; relevant certifications (e.g., CCNP/CCIE, CISSP, CISM, CCSP) are highly beneficial.
• Strong analytical and problem-solving skills, with the ability to handle complex incidents and provide clear technical guidance.
• Effective written and verbal communication skills, and the ability to collaborate with distributed teams in a remote work environment.

Technical Skills:

Routing & Switching: include BGP, OSPF and switching Protocols such as VTP, STP & RSTP

Firewall (L3): Firewall Policies including Destination NAT, Source NAT, IPS, Application Control and Web Control (FortiGate & PaloAlto)

Email Security, Web Security & DLP (Forcepoint)

Endpoint Security & Disk Encryption: Kaspersky or TrendMicro or Symantec

EDR/XDR: TrendMicro or Kaspersky

F5/WAF: LTM, ASM and GTM (DNS)

ZTNA & SASE (Fortinet or any OEM)

SDWAN (Aruba, Fortinet or any OEM)

Cloud: OCI or Azure or AWS