Manager, Security Architect

About the role

Job Summary

The Security Architect will shape security architecture across ATOM’s enterprise, telecom, digital, and customer-facing environments. The role may be appointed at Senior Manager or Manager level, depending on experience and capability. This senior role combines technical expertise with leadership, business judgment, financial understanding, and organizational influence. The Security Architect will define security strategies, principles, standards, target architectures, roadmaps, and operating models. The role will guide major investments and lead transformation from assessment through implementation and operational adoption. Key priorities include modernizing secure enterprise access; strengthening privileged and administrative access; improving certificate lifecycle management; enhancing Domain Name System security; and evaluating cloud-delivered, locally operated, managed, and hybrid security capabilities. The role will also assess managed security services and customer-facing offerings aligned with sovereignty, resilience, regulatory, operational, and commercial requirements.

Enterprise Security Architecture

• Define and maintain ATOM’s enterprise security architecture, principles, standards, reference designs, and multi-year roadmap.
• Develop target and transition architectures across identity, endpoint, network, infrastructure, cloud, applications, data, telecommunications, and customer services.
• Align decisions with business priorities, operational needs, regulatory obligations, technology strategy, availability, and customer impact.
• Review major initiatives and issue clear architecture decisions, requirements, risks, assumptions, and recommendations.

Secure Enterprise Access

• Modernize access to enterprise applications, infrastructure, cloud services, telecommunications platforms, and administrative environments.
• Define coherent architecture for workforce, privileged, third-party, remote, and administrative access.
• Apply identity verification, device security, least privilege, contextual risk, session control, segmentation, and continuous policy enforcement.
• Evaluate cloud-delivered, locally operated, managed, and hybrid approaches without dependence on a specific vendor.

Privileged and Administrative Access

• Define architecture for privileged identities, separate administrative accounts, controlled administration environments, session management, credential protection, and time-bound access.
• Establish secure access patterns for infrastructure, network, cloud, database, application, telecommunications, and third-party administrators.
• Promote approval-based elevation, credential rotation, session monitoring, emergency access, and protection of service and machine identities.
• Ensure controls are usable, resilient, supportable, auditable, and proportionate to criticality.

Education & Experience

• Bachelor’s degree is not mandatory. A relevant degree in Computer Science, Information Security, Telecom, Engineering, IT, Business Technology, or a related discipline is preferred. Substantial relevant leadership, technical, and architecture experience may substitute for formal qualifications.
• 8+ years of relevant experience across security, architecture, network, identity, infrastructure, cloud, telecom, or related disciplines.
• Senior-level experience or comparable influence, complexity, and accountability.
• Proven experience leading cross-functional security architecture and transformation initiatives from assessment and design through implementation and operational handover.

Key Skillsets

• Good understanding of identity-based access, device security, least privilege, privileged access, network segmentation, cloud-delivered controls, and secure administration.
• Knowledge of digital certificates, cryptographic keys, machine identities, certificate automation, DNS services, domain governance, monitoring, and related threats.
• Understanding of telecom platforms, applications, cloud-native platforms, software delivery, threat prevention, incident response, vulnerability management, and resilience.
• Ability to assess technology and delivery options independently of specific vendors.

How to apply: Apply via ATOM's official careers portal (myTalent): open the vacancy, click "Apply", sign in or create an account and submit your CV. Apply here: https://mytalent.aml.mobi/en/company/atom/career/jobs/25/