وظائف مهندسى امن معلومات في الأردن

<p><h4>Description</h4> <p>The cybersecurity consultant is responsible for delivering cybersecurity advisory, governance, risk, and compliance services across enterprise, government, and critical infrastructure customers throughout the MENA region. Operating within ZainTECH’s cybersecurity advisory services practice, the role helps organizations assess, strengthen, and mature their cybersecurity posture through strategic consulting engagements aligned with industry best practices, regulatory requirements, and business objectives.</p> <p>This role assesses security maturity, identifies gaps, develops cybersecurity roadmaps, and provides actionable recommendations that enhance resilience and reduce organizational risk. The role plays a key part in expanding ZainTECH’s cybersecurity advisory capabilities while supporting opportunities that may transition into recurring managed security services.</p> <h4>Responsibilities</h4> <p><strong>Cybersecurity advisory & consulting</strong><br> Lead and deliver cybersecurity consulting engagements across a broad range of industries and customer environments.<br> Provide strategic advisory services covering cybersecurity strategy, governance frameworks, risk management, compliance programs, and security transformation initiatives.<br> Assess customer cybersecurity capabilities and provide recommendations aligned with business and regulatory requirements.<br> Support organizations in developing cybersecurity operating models and governance structures.</p> <p><strong>Security assessments & gap analysis</strong><br> Conduct cybersecurity maturity assessments against recognized standards and frameworks including ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), CIS Critical Security Controls, and applicable regional cybersecurity regulations.<br> Perform gap assessments, risk assessments, control effectiveness reviews, and compliance assessments.<br> Identify security weaknesses, process gaps, and governance deficiencies.<br> Develop prioritized remediation roadmaps aligned with organizational objectives.</p> <p><strong>Governance, risk & compliance (GRC)</strong><br> Advise customers on the design and implementation of cybersecurity governance frameworks.<br> Support the development of security policies, standards, procedures, and control frameworks.<br> Facilitate cybersecurity risk management activities and risk workshops.<br> Assist customers with compliance readiness and regulatory alignment initiatives.<br> Provide recommendations for improving organizational security governance and oversight.</p> <p><strong>Security architecture & control advisory</strong><br> Review existing security controls and architecture designs.<br> Provide risk-based recommendations covering identity and access management, network security, endpoint security, cloud security, data protection, and security monitoring.<br> Ensure recommendations are practical, scalable, and aligned with customer business requirements.<br> Support cybersecurity transformation and modernization programs.</p> <p><strong>Client engagement & stakeholder management</strong><br> Act as a trusted cybersecurity advisor to customer stakeholders.<br> Facilitate workshops, interviews, and assessment activities.<br> Present findings and recommendations to executive leadership, technology teams, risk and compliance functions, and regulatory stakeholders.<br> Build strong relationships with customer teams and maintain high levels of client satisfaction.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree in information technology or a related field.</li> <li>Minimum 5 years of hands-on cybersecurity experience, with a track record of advisory or consulting delivery.</li> <li>At least one valid NCSC-approved professional certification such as CISSP, CISM (Certified Information Security Manager), ISO/IEC 27001 Lead Implementer / Lead Auditor, CISA, or another equivalent certification in the same field that is approved by the NCSC and published on its official website.</li> <li>Working command of ISO/IEC 27001, NIST CSF, and applicable Jordanian and regional regulatory requirements.</li> <li>Excellent written and verbal communication in English and Arabic, with the ability to present to executive and regulatory stakeholders.</li> <li>Advanced degree (Master's or higher) in cybersecurity, information systems, or a related discipline is preferable.</li> <li>Multiple certifications across governance, risk, and audit (for example holding more than one of CISSP, CISM, CISA, ISO 27001 LI/LA) is preferable.</li> <li>Prior experience in a consultancy, system integrator, or telco-affiliated security practice serving regulated sectors is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>We are hiring a cybersecurity consultant / sales engineer for a remote, client-facing role based in Amman, Jordan.</p> <p>This role is suitable for someone with 1–3 years of experience in sales, pre-sales, business development, or consulting, with a cybersecurity background or strong technical understanding of cybersecurity services.</p> <p>The role will focus on engaging with clients, understanding their cybersecurity needs, explaining services clearly, qualifying opportunities, following up with prospects, updating CRM activities, and supporting business growth.</p> <p>This is not a pure technical delivery role and not a general sales role. It is a consultative cybersecurity role for someone who can combine communication skills, cybersecurity understanding, and commercial discipline.</p> <p>The ideal candidate should be comfortable speaking with clients, asking the right questions, identifying business needs, and supporting the sales process for cybersecurity services such as SOC, GRC, VAPT, compliance, and advisory services.</p> <h4>Requirements</h4> <ul> <li>Currently based in Amman, Jordan</li> <li>1–3 years of experience in sales, pre-sales, business development, or consulting</li> <li>Experience selling or supporting services, not only products or software licenses</li> <li>Cybersecurity background or strong technical understanding of cybersecurity services</li> <li>Previous exposure to cybersecurity services such as SOC, GRC, VAPT, compliance, advisory, or managed security services is preferred</li> <li>Strong communication and follow-up skills</li> <li>Comfortable speaking with clients and explaining cybersecurity services clearly</li> <li>Comfortable working with monthly sales targets and pipeline updates</li> <li>Experience using HubSpot or any CRM system is preferred</li> <li>Ability to work remotely with discipline, daily follow-up, and proper activity reporting</li> <li>Stable internet connection and a professional environment for client calls</li> <li>Arabic and English communication skills are required</li> </ul> <h4>Benefits</h4> <ul> <li>Remote work model</li> <li>Opportunity to grow in cybersecurity sales, consulting, and business development</li> <li>Exposure to enterprise cybersecurity services and client engagements</li> <li>Clear role focus with structured pipeline and CRM activity</li> <li>Opportunity to work with an experienced cybersecurity team</li> <li>Professional growth in areas such as SOC, GRC, VAPT, compliance, and advisory services</li> <li>Performance-driven environment with room for career development</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The cybersecurity consultant is responsible for delivering cybersecurity advisory, governance, risk, and compliance services across enterprise, government, and critical infrastructure customers throughout the MENA region. Operating within ZainTECH’s cybersecurity advisory services practice, the role helps organizations assess, strengthen, and mature their cybersecurity posture through strategic consulting engagements aligned with industry best practices, regulatory requirements, and business objectives.</p> <p>This role assesses security maturity, identifies gaps, develops cybersecurity roadmaps, and provides actionable recommendations that enhance resilience and reduce organizational risk. The role plays a key part in expanding ZainTECH’s cybersecurity advisory capabilities while supporting opportunities that may transition into recurring managed security services.</p> <h4>Responsibilities</h4> <p><strong>Cybersecurity advisory & consulting</strong><br> Lead and deliver cybersecurity consulting engagements across a broad range of industries and customer environments.<br> Provide strategic advisory services covering cybersecurity strategy, governance frameworks, risk management, compliance programs, and security transformation initiatives.<br> Assess customer cybersecurity capabilities and provide recommendations aligned with business and regulatory requirements.<br> Support organizations in developing cybersecurity operating models and governance structures.</p> <p><strong>Security assessments & gap analysis</strong><br> Conduct cybersecurity maturity assessments against recognized standards and frameworks including ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), CIS Critical Security Controls, and applicable regional cybersecurity regulations.<br> Perform gap assessments, risk assessments, control effectiveness reviews, and compliance assessments.<br> Identify security weaknesses, process gaps, and governance deficiencies.<br> Develop prioritized remediation roadmaps aligned with organizational objectives.</p> <p><strong>Governance, risk & compliance (GRC)</strong><br> Advise customers on the design and implementation of cybersecurity governance frameworks.<br> Support the development of security policies, standards, procedures, and control frameworks.<br> Facilitate cybersecurity risk management activities and risk workshops.<br> Assist customers with compliance readiness and regulatory alignment initiatives.<br> Provide recommendations for improving organizational security governance and oversight.</p> <p><strong>Security architecture & control advisory</strong><br> Review existing security controls and architecture designs.<br> Provide risk-based recommendations covering identity and access management, network security, endpoint security, cloud security, data protection, and security monitoring.<br> Ensure recommendations are practical, scalable, and aligned with customer business requirements.<br> Support cybersecurity transformation and modernization programs.</p> <p><strong>Client engagement & stakeholder management</strong><br> Act as a trusted cybersecurity advisor to customer stakeholders.<br> Facilitate workshops, interviews, and assessment activities.<br> Present findings and recommendations to executive leadership, technology teams, risk and compliance functions, and regulatory stakeholders.<br> Build strong relationships with customer teams and maintain high levels of client satisfaction.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree in information technology or a related field.</li> <li>Minimum 5 years of hands-on cybersecurity experience, with a track record of advisory or consulting delivery.</li> <li>At least one valid NCSC-approved professional certification such as CISSP, CISM (Certified Information Security Manager), ISO/IEC 27001 Lead Implementer / Lead Auditor, CISA, or another equivalent certification in the same field that is approved by the NCSC and published on its official website.</li> <li>Working command of ISO/IEC 27001, NIST CSF, and applicable Jordanian and regional regulatory requirements.</li> <li>Excellent written and verbal communication in English and Arabic, with the ability to present to executive and regulatory stakeholders.</li> <li>Advanced degree (Master's or higher) in cybersecurity, information systems, or a related discipline is preferable.</li> <li>Multiple certifications across governance, risk, and audit (for example holding more than one of CISSP, CISM, CISA, ISO 27001 LI/LA) is preferable.</li> <li>Prior experience in a consultancy, system integrator, or telco-affiliated security practice serving regulated sectors is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>We are hiring a cybersecurity consultant / sales engineer for a remote, client-facing role based in Amman, Jordan.</p> <p>This role is suitable for someone with 1–3 years of experience in sales, pre-sales, business development, or consulting, with a cybersecurity background or strong technical understanding of cybersecurity services.</p> <p>The role will focus on engaging with clients, understanding their cybersecurity needs, explaining services clearly, qualifying opportunities, following up with prospects, updating CRM activities, and supporting business growth.</p> <p>This is not a pure technical delivery role and not a general sales role. It is a consultative cybersecurity role for someone who can combine communication skills, cybersecurity understanding, and commercial discipline.</p> <p>The ideal candidate should be comfortable speaking with clients, asking the right questions, identifying business needs, and supporting the sales process for cybersecurity services such as SOC, GRC, VAPT, compliance, and advisory services.</p> <h4>Requirements</h4> <ul> <li>Currently based in Amman, Jordan</li> <li>1–3 years of experience in sales, pre-sales, business development, or consulting</li> <li>Experience selling or supporting services, not only products or software licenses</li> <li>Cybersecurity background or strong technical understanding of cybersecurity services</li> <li>Previous exposure to cybersecurity services such as SOC, GRC, VAPT, compliance, advisory, or managed security services is preferred</li> <li>Strong communication and follow-up skills</li> <li>Comfortable speaking with clients and explaining cybersecurity services clearly</li> <li>Comfortable working with monthly sales targets and pipeline updates</li> <li>Experience using HubSpot or any CRM system is preferred</li> <li>Ability to work remotely with discipline, daily follow-up, and proper activity reporting</li> <li>Stable internet connection and a professional environment for client calls</li> <li>Arabic and English communication skills are required</li> </ul> <h4>Benefits</h4> <ul> <li>Remote work model</li> <li>Opportunity to grow in cybersecurity sales, consulting, and business development</li> <li>Exposure to enterprise cybersecurity services and client engagements</li> <li>Clear role focus with structured pipeline and CRM activity</li> <li>Opportunity to work with an experienced cybersecurity team</li> <li>Professional growth in areas such as SOC, GRC, VAPT, compliance, and advisory services</li> <li>Performance-driven environment with room for career development</li> </ul></p><p></p>

<p><h4>Description</h4> <p>We are seeking an experienced Fortinet Security Engineer to support compliance and security rollout activities across retail outlets in Dubai. The ideal candidate will have strong hands-on experience with FortiGate firewalls and FortiAnalyzer, with the ability to manage security configurations, monitoring, troubleshooting, and reporting activities in enterprise environments.</p> <h4>Key Responsibilities:</h4> <ul> <li>Configure, deploy, and troubleshoot FortiGate firewalls</li> <li>Manage firewall policies, NAT, VPNs, routing, and security profiles</li> <li>Monitor and analyze security logs using FortiAnalyzer</li> <li>Support compliance and security implementation across retail branches</li> <li>Perform troubleshooting and incident resolution</li> <li>Ensure security best practices and policy compliance</li> <li>Work closely with project and infrastructure teams during rollout activities</li> <li>Prepare technical documentation and implementation reports</li> </ul> <h4>Requirements</h4> <ul> <li>Strong hands-on experience with Fortinet FortiGate firewalls</li> <li>Strong experience with FortiAnalyzer</li> <li>Good understanding of network security concepts</li> <li>Experience with VPNs, IPS, web filtering, and security policies</li> <li>Knowledge of routing and switching concepts</li> <li>Experience in enterprise or retail environments is preferred</li> <li>Strong troubleshooting and communication skills</li> </ul> <h4>Preferred Certifications:</h4> <p>NSE certification is a plus</p></p><p></p>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Network Engineer Tier 1 Role Summary: The Network Engineer Tier 1 is an entry-level technical role responsible for the configuration, installation, and operation of network equipment under direct supervision. This role focuses on performing scheduled maintenance, handling basic break/fix tasks, and ensuring all network configurations adhere to established standards and designs. They work closely with NOC teams on escalated incidents and change deployment.</p><p>Core Responsibilities:</p><ul><li>Configuration &amp; Implementation: Perform basic configuration changes, device staging, and implementation of approved change requests on routers, switches, and firewalls.</li><li>Operational Support: Assist senior engineers with troubleshooting complex issues, focusing on verifying configurations, checking status indicators, and collecting diagnostic data (logs, packet captures).</li><li>Network Monitoring &amp; Tools: Maintain and operate network monitoring tools, ensuring proper configuration and data integrity.</li><li>Documentation: Create and maintain accurate network documentation, including diagrams, inventories, and configuration baselines.</li><li>Change Management: Execute pre-approved maintenance windows and support the deployment of firmware upgrades and patches.</li></ul><p>Essential Skills and Knowledge:</p><ul><li>Networking: Solid grasp of the OSI model, TCP/IP, basic routing (static, OSPF), and switching (VLANs, STP).</li><li>Vendor CLI: Familiarity with the Command Line Interface (CLI) for at least one major vendor (Cisco, Fortinet, Juniper).</li><li>Troubleshooting: Ability to use basic network troubleshooting tools (ping, traceroute, simple show commands).</li><li>Communication: Clear and effective communication for coordinating maintenance activities and reporting progress.</li></ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><h2>Required Qualifications:</h2><ul><li>Experience: Minimum of 1 to 2 years of hands-on experience in a networking, NOC, or data center environment.</li><li>Education: Associate's Degree in Information Technology, Computer Science, or equivalent technical training (or equivalent work experience).</li><li>Certifications (Desired): CompTIA Network+ or Fortinet Professional.</li><li>Certifications (Required): Cisco Certified Network Associate (CCNA).</li></ul><p></p></section>

<p ><strong>ORGANIZATION&nbsp;</strong><span ><strong>DESCRIPTION:</strong><br> An American non-profit organization established in 1951 and headquartered in Washington, D.C., with country offices and programs in the Middle East and North Africa region and beyond. Amideast provides transformational education, training, testing, and exchanges that enable individuals, companies, and international partners to better address 21st-century challenges at home and abroad. For more information, visit us at www.amideast.org.&nbsp;<br> <br> <strong>POSITION DESCRIPTION:</strong><br> The Cybersecurity and Data Protection Officer is responsible for protecting the organization’s information systems, networks, data, and digital assets from cyber threats, unauthorized access, and security breaches. This role involves developing and implementing security policies, monitoring systems for vulnerabilities and suspicious activities, conducting security gap analysis, risk assessments, and ensuring compliance with regulatory and industry security standards.<br> <br> In addition, the role is responsible for ensuring compliance with applicable laws, regulations, and industry standards related to cybersecurity and data privacy through advising on emerging risks, supporting audits and regulatory reviews, managing third-party security and privacy risks, and promoting a culture of security awareness and responsible data handling throughout the organization.<br> <br> <strong>RESPONSIBILITIES:</strong><br> •<span > </span>Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices<br> •<span > </span>Implement, maintain, and monitor security compliance such as ISO (International Organization for Standardization), NIST (National Institute of Standards and Technology), and SOC (System and Organization Controls) standards<br> •<span > </span>Design and advise on the implementation of disaster recovery plan for operating systems, databases, networks, servers, and software applications<br> •<span > </span>Design and implement incident response plans based on filed office laws and regulations<br> •<span > </span>Design, implement, and monitor data protection policies and procedures<br> •<span > </span>Assess need for any security reconfigurations and execute them if required<br> •<span > </span>Conduct email phish-hunting and submit malicious senders for blocking through anti-phishing policy<br> •<span > </span>Execute Amideast’s security awareness program and report on user compliance<br> •<span > </span>Keep current with emerging security alerts and issues<br> •<span > </span>Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts<br> •<span > </span>Recommend, schedule, and perform security improvements, upgrades, and/or purchases<br> •<span > </span>Participate in deploying, managing, and maintaining all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software<br> •<span > </span>Ensure databases are securely configured, monitored, and maintained through access controls, encryption, vulnerability management, and regular security assessments to safeguard the confidentiality, integrity, and availability of information<br> •<span > </span>Design, perform, and/or oversee penetration testing of all systems to identify system vulnerabilities<br> •<span > </span>Design, implement, and report on security systems and end user activity audits<br> •<span > </span>Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution<br> •<span > </span>Recommend, schedule (where appropriate), and guide fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach<br> •<span > </span>Evaluate new security software and/or technologies<br> •<span > </span>Develop, implement, and oversee data protection policies, standards, and controls to ensure the secure collection, processing, storage, sharing, and disposal of sensitive and personal information, while maintaining compliance with applicable privacy regulations and organizational governance requirements.&nbsp;<br> •<span > </span>Provide on-call security support to end-users when needed<br> <br> <strong>QUALIFICATIONS AND SKILLS:</strong><br> Required<br> •<span > </span>College diploma or university degree in the field of computer science, preferably with a focus on Cybersecurity<br> •<span > </span>Minimum 5 years’ relevant work experience in the field of cybersecurity<br> •<span > </span>One or more of the following certifications:<br> o<span > </span>Certified Ethical Hacker (CEH)<br> o<span > </span>GIAC Security Essentials Certification<br> o<span > </span>GIAC Certified Enterprise Defender<br> o<span > </span>ISACA Certified Information Security Manager<br> o<span > </span>Microsoft Certified Systems Engineer: Security<br> o<span > </span>(ISC)2 SCCP<br> o<span > </span>(ISC)2 CISSP<br> o<span > </span>(ISC)2 ISSAP<br> •<span > </span>Knowledge of regulatory requirements and industry standards, such as GDPR, HIPAA, NIST, and ISO 27001<br> •<span > </span>Hands-on experience implementing at least one security standard compliance for an organization and leading the certification process<br> •<span > </span>Knowledge of applicable practices and laws relating to data privacy and protection and working experience implementing at least one privacy standard<br> •<span > </span>Knowledge of law enforcement practices and procedures in the US and the MENA region<br> •<span > </span>Intuition and keen instincts to preempt attacks<br> •<span > </span>Strong practical experience conducting penetration testing and vulnerability assessments<br> •<span > </span>High level of analytical and problem-solving abilities<br> •<span > </span>Ability to conduct research into security issues and products as required<br> •<span > </span>Broad hands-on knowledge of firewalls, intrusion detection systems, endpoint protection, data encryption, and other industry-standard techniques and practices<br> •<span > </span>Working technical knowledge of network, PC, and Microsoft and Linux operating systems<br> •<span > </span>Working technical knowledge Microsoft Cloud Security Portal for Office365<br> •<span > </span>Working technical knowledge of current systems software, protocols, and standards<br> •<span > </span>Strong interpersonal and oral communication skills<br> •<span > </span>Advanced written and verbal proficiency in English and Arabic<br> •<span > </span>Highly self-motivated and directed<br> •<span > </span>Strong organizational skills<br> •<span > </span>Excellent attention to detail<br> •<span > </span>Ability to effectively prioritize and execute tasks in a high-pressure environment<br> •<span > </span>Able to work in a team-oriented, collaborative environment<br> <br> Preferred<br> •<span > </span>Advanced written and verbal proficiency in French</span></p> <p ><span ><strong>WORK ENVIRONMENT:</strong><br> If the successful candidate is hired in Morocco (Casablanca or Rabat), Tunisia (Tunis), Jordan (Amman), or West Bank (Ramallah), the position will operate under a hybrid work arrangement working 4 days per week remotely and 1 day per week from an Amideast office. If the successful candidate is hired in Egypt (Cairo or Alexandria), the position will operate full time (5 days per week) from the local Amideast office.&nbsp;<br> The final schedule will be determined based on operational needs, collaboration requirements, and organizational guidelines. The incumbent will utilize the following equipment:&nbsp;<br> •<span > </span>Computer (laptop or desktop)<br> •<span > </span>Printer/Photocopier/Scanner/Fax<br> •<span > </span>Telephone</span><br> <br> <span >This position requires a non-standard work schedule to overlap with U.S. Eastern Time. Typical hours involve a later start and extended evening availability to meet business needs. </span><span >Up to 5% business travel may be needed to support business initiatives as needed.</span></p> <p ><span >The physical demands and work environment that have been described are representative of those an employee encounters while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This position description is an overview of the major functions and requirements of this position. This document is not intended to be an exhaustive list encompassing every duty and requirement of the position; the Employee’s supervisor may assign other duties as related or as otherwise deemed appropriate and necessary within the general scope, without the need for additional compensation.&nbsp;</span></p> <p ><span >Amideast is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.</span></p> <p ><span >Positions that involve interaction with children will be required to read, acknowledge, and comply with and attend special training in accordance with the Child Protection and Safeguarding policy. All Amideast representatives must comply with the Code of Conduct and all applicable organizational policies.</span></p> <p >We encourage applicants with disabilities to apply, provided they meet the essential qualifications and requirements for the position. We are committed to creating an inclusive and accessible work environment for all candidates.</p> <p><strong><span >Amideast provides covered training opportunities for its staff within its current portfolio of offered services and that it invests in the advancement of its staff’s capabilities and skills to better perform at their roles.</span></strong></p> <p ><strong><span >Please&nbsp;note only the shortlisted candidates will be contacted. Interviews will be conducted on rolling basis and the vacancy will be closed when filled.</span></strong></p>

<p><h4>Description</h4> <p>We are looking for a dedicated and experienced DPS Engineer to join our team in Alkhobar, KSA for an 8-month project. In this role, you will be responsible for the deployment, maintenance, and optimization of our data protection solutions. We are seeking a DPS Engineer responsible for designing, implementing, and supporting enterprise Data Protection and Cyber Recovery solutions within large-scale, mission-critical environments. The ideal candidate will possess strong expertise in Dell data protection technologies and experience working within banking or highly regulated sectors.</p> <h4>Key Responsibilities</h4> <ul> <li>Design, implement, and administer Data Protection and Cyber Recovery solutions</li> <li>Manage and support Dell Data Protection platforms</li> <li>Implement Cyber Recovery strategies and security-focused architectures</li> <li>Perform system upgrades, patching, and performance optimization</li> <li>Troubleshoot infrastructure, backup, and recovery issues</li> <li>Ensure data integrity, availability, and security compliance</li> <li>Collaborate with vendor support teams where required</li> <li>Support large-scale enterprise environments with high availability requirements</li> </ul> <h4>Requirements</h4> <ul> <li>Dell NetWorker</li> <li>Dell Cyber Recovery</li> <li>Dell CyberSense</li> <li>Dell Data Domain</li> </ul> <h4>Required Experience</h4> <ul> <li>Strong hands-on experience in Data Protection and Cyber Recovery technologies</li> <li>Proven exposure to large-scale banking environments or highly regulated industries</li> <li>Ability to handle complex enterprise infrastructures</li> </ul> <h4>Benefits</h4> <ul> <li>Medical insurance including family</li> <li>Flight tickets including family</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>We are looking for an experienced IT Governance – Security &amp; Resilience to join our team and play a key role in strengthening the Bank's IT governance, cybersecurity, and operational resilience capabilities.<br> In this role, you will serve as the primary IT liaison for security and resilience matters, working closely with the Cybersecurity Department to ensure that IT operations, systems, projects, and processes comply with security standards, regulatory requirements, and industry best practices.<br> Key Responsibilities Collaborate with the Cybersecurity Department to implement security policies, standards, and controls across IT systems and infrastructure.<br> Ensure IT operations, projects, and technology changes comply with governance frameworks such as ISO 27001 , NIST Cybersecurity Framework (NIST CSF) , COBIT , and applicable banking regulations.<br> Translate cybersecurity requirements into effective IT governance processes, procedures, and operational guidelines.<br> Coordinate security and risk assessments for all IT projects, system changes, and technology deployments as part of the Bank's governance and change management processes.<br> Govern the IT risk management process by identifying, assessing, monitoring, reporting, and mitigating IT risks in alignment with Enterprise Risk Management (ERM) practices.<br> Monitor the Bank's IT risk posture and ensure timely remediation of security vulnerabilities, compliance issues, audit findings, and control gaps.<br> Lead the governance of IT Business Continuity and Disaster Recovery (BC/DR), ensuring critical IT services have documented, tested, and continuously improved recovery capabilities.<br> Coordinate IT audits, regulatory inspections, and compliance reviews while maintaining governance documentation, policies, standards, and procedures.<br> Prepare regular reports and dashboards on IT security posture, risk exposure, compliance status, resilience readiness, and governance metrics for senior management and governance committees.<br> Support IT incident response activities in coordination with the Cybersecurity Department, including incident escalation, communication, post-incident reviews, and tracking corrective and preventive actions.<br> Promote a strong culture of security awareness, governance, compliance, and operational resilience across IT teams.<br> Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.<br> Proven experience in IT Governance, Information Security, IT Risk Management, IT Audit, or Operational Resilience , preferably within the banking or financial services sector.<br> Strong knowledge of ISO 27001 , NIST CSF , COBIT , IT risk management, business continuity, disaster recovery, and regulatory compliance.<br> Excellent analytical, communication, stakeholder management, and reporting skills.<br> Professional certifications such as CISA, CRISC, CGEIT, CISSP, or ISO 27001 Lead Implementer/Auditor are considered an advantage.<br></span> </div>

<p><h4>Key responsibilities</h4> <p>We are looking for an experienced IT Governance – Security & Resilience to join our team and play a key role in strengthening the bank's IT governance, cybersecurity, and operational resilience capabilities.<br> In this role, you will serve as the primary IT liaison for security and resilience matters, working closely with the Cybersecurity Department to ensure that IT operations, systems, projects, and processes comply with security standards, regulatory requirements, and industry best practices.</p> <ul> <li>Collaborate with the Cybersecurity Department to implement security policies, standards, and controls across IT systems and infrastructure.</li> <li>Ensure IT operations, projects, and technology changes comply with governance frameworks such as ISO 27001, NIST Cybersecurity Framework (NIST CSF), COBIT, and applicable banking regulations.</li> <li>Translate cybersecurity requirements into effective IT governance processes, procedures, and operational guidelines.</li> <li>Coordinate security and risk assessments for all IT projects, system changes, and technology deployments as part of the bank's governance and change management processes.</li> <li>Govern the IT risk management process by identifying, assessing, monitoring, reporting, and mitigating IT risks in alignment with Enterprise Risk Management (ERM) practices.</li> <li>Monitor the bank's IT risk posture and ensure timely remediation of security vulnerabilities, compliance issues, audit findings, and control gaps.</li> <li>Lead the governance of IT Business Continuity and Disaster Recovery (BC/DR), ensuring critical IT services have documented, tested, and continuously improved recovery capabilities.</li> <li>Coordinate IT audits, regulatory inspections, and compliance reviews while maintaining governance documentation, policies, standards, and procedures.</li> <li>Prepare regular reports and dashboards on IT security posture, risk exposure, compliance status, resilience readiness, and governance metrics for senior management and governance committees.</li> <li>Support IT incident response activities in coordination with the Cybersecurity Department, including incident escalation, communication, post-incident reviews, and tracking corrective and preventive actions.</li> <li>Promote a strong culture of security awareness, governance, compliance, and operational resilience across IT teams.</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.</li> <li>Proven experience in IT Governance, Information Security, IT Risk Management, IT Audit, or Operational Resilience, preferably within the banking or financial services sector.</li> <li>Strong knowledge of ISO 27001, NIST CSF, COBIT, IT risk management, business continuity, disaster recovery, and regulatory compliance.</li> <li>Excellent analytical, communication, stakeholder management, and reporting skills.</li> <li>Professional certifications such as CISA, CRISC, CGEIT, CISSP, or ISO 27001 Lead Implementer/Auditor are considered an advantage.</li> </ul></p><p></p>

<p><h4>Key responsibilities</h4> <p>We are looking for an experienced IT Governance – Security & Resilience to join our team and play a key role in strengthening the bank's IT governance, cybersecurity, and operational resilience capabilities.<br> In this role, you will serve as the primary IT liaison for security and resilience matters, working closely with the Cybersecurity Department to ensure that IT operations, systems, projects, and processes comply with security standards, regulatory requirements, and industry best practices.</p> <ul> <li>Collaborate with the Cybersecurity Department to implement security policies, standards, and controls across IT systems and infrastructure.</li> <li>Ensure IT operations, projects, and technology changes comply with governance frameworks such as ISO 27001, NIST Cybersecurity Framework (NIST CSF), COBIT, and applicable banking regulations.</li> <li>Translate cybersecurity requirements into effective IT governance processes, procedures, and operational guidelines.</li> <li>Coordinate security and risk assessments for all IT projects, system changes, and technology deployments as part of the bank's governance and change management processes.</li> <li>Govern the IT risk management process by identifying, assessing, monitoring, reporting, and mitigating IT risks in alignment with Enterprise Risk Management (ERM) practices.</li> <li>Monitor the bank's IT risk posture and ensure timely remediation of security vulnerabilities, compliance issues, audit findings, and control gaps.</li> <li>Lead the governance of IT Business Continuity and Disaster Recovery (BC/DR), ensuring critical IT services have documented, tested, and continuously improved recovery capabilities.</li> <li>Coordinate IT audits, regulatory inspections, and compliance reviews while maintaining governance documentation, policies, standards, and procedures.</li> <li>Prepare regular reports and dashboards on IT security posture, risk exposure, compliance status, resilience readiness, and governance metrics for senior management and governance committees.</li> <li>Support IT incident response activities in coordination with the Cybersecurity Department, including incident escalation, communication, post-incident reviews, and tracking corrective and preventive actions.</li> <li>Promote a strong culture of security awareness, governance, compliance, and operational resilience across IT teams.</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.</li> <li>Proven experience in IT Governance, Information Security, IT Risk Management, IT Audit, or Operational Resilience, preferably within the banking or financial services sector.</li> <li>Strong knowledge of ISO 27001, NIST CSF, COBIT, IT risk management, business continuity, disaster recovery, and regulatory compliance.</li> <li>Excellent analytical, communication, stakeholder management, and reporting skills.</li> <li>Professional certifications such as CISA, CRISC, CGEIT, CISSP, or ISO 27001 Lead Implementer/Auditor are considered an advantage.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Provide secured remote operational support across identity and access management and vulnerability management.<br> The role performs approved technical activities and tracking; access approvals, security policy, risk acceptance and regulatory accountability.<br> • Support user, privileged and service-account administration through approved requests and access workflows.<br> • Assist with periodic access reviews, joiner/mover/leaver controls and evidence preparation.<br> • Operate approved vulnerability scanning and reporting tools and validate findings with system owners.<br> • Maintain vulnerability, exception and remediation trackers and coordinate technical follow-up.<br> • Support IAM, MFA, privileged-access and directory-service incidents within authorised access boundaries.<br> • Provide metrics, evidence and trend analysis for security reporting and governance reviews.<br> • Escalate overdue, critical or policy-related matters to the onsite Security Engineer.<br> • Maintain operational procedures, access-control records and vulnerability-management documentation.<br> • Minimum 5 years of relevant IAM and/or vulnerability-management experience, with credible practical exposure to both domains.<br> • Experience with Microsoft identity services, SailPoint, CyberArk or equivalent IAM/PAM platforms.<br> • Experience with enterprise vulnerability-scanning and remediation-tracking platforms.<br> • Microsoft Identity, SailPoint, CyberArk, CEH, OSCP, GPEN or equivalent certification preferred.<br> • Strong understanding of privileged access, least privilege, remediation governance and audit evidence.<br> Preferred Profile • Previous experience supporting UAE government or regulated cybersecurity environments.<br> • Working knowledge of TDRA-hosted environments and related security-access processes.<br> • Experience operating through secured remote-access and privileged-session controls.<br> Expected Contribution • Access and vulnerability activities are completed only through approved workflows.<br> • Critical findings and overdue actions are escalated with clear ownership.<br> • Evidence and trackers remain accurate, current and audit-ready.<br></span> </div>

<p><h4>Description</h4> <p>We are looking for a Senior Fortinet Security Engineer with hands-on experience in FortiGate, FortiAnalyzer, and FortiManager to support security compliance implementation across multiple retail outlets. The role involves centralized firewall management, monitoring, troubleshooting, and supporting enterprise security operations.</p> <h4>Key Responsibilities:</h4> <ul> <li>Deploy, configure, and manage FortiGate Firewalls</li> <li>Configure and manage FortiAnalyzer for monitoring and reporting</li> <li>Manage centralized firewall administration using FortiManager</li> <li>Implement firewall policies, VPNs, security profiles, and access controls</li> <li>Perform troubleshooting and resolve network/security incidents</li> <li>Support compliance rollout and security standardization activities</li> <li>Coordinate with infrastructure and project teams during implementations</li> <li>Maintain documentation, reports, and operational procedures</li> </ul> <h4>Requirements</h4> <ul> <li>Minimum 6 years of hands-on experience with Fortinet Security solutions including FortiGate, FortiAnalyzer, and FortiManager</li> <li>Strong hands-on experience with FortiGate Firewalls</li> <li>Strong experience with FortiAnalyzer</li> <li>Mid-to-strong level experience with FortiManager</li> <li>Good understanding of enterprise network security</li> <li>Experience with firewall HA, policy management, VPNs, and logging</li> <li>Strong troubleshooting and implementation skills</li> <li>Experience in retail or enterprise environments is preferred</li> </ul> <h4>Preferred Certifications:</h4> <p>Fortinet NSE Certifications are highly preferred</p></p><p></p>

<p><h4>Job description</h4> <p>Saab Inc. is looking for an Information Systems Security Manager (ISSM) to lead onsite cybersecurity efforts for classified programs. This position requires strong expertise in the Risk Management Framework (RMF), defense cybersecurity standards, COMSEC, and technical skills in complex, mission-critical environments. The role is responsible for maintaining the security of the site's classified systems and infrastructure, serving as the facility Information Systems Security Manager (ISSM), and providing expert advice on confidentiality, integrity, and availability.</p> <p>The ISSM will work closely with engineering and program leadership to ensure that security governance, risk management, and compliance are integrated throughout all operational and development activities at the site.</p> <p>This position is eligible for Saab, Inc's relocation package.</p> <h4>Key responsibilities</h4> <ul> <li>Lead the execution of business enablement initiatives, incorporating advanced security principles into classified cyber programs to manage risk effectively, align with customer requirements, and support program success.</li> <li>Provide oversight and guidance to ISSO staff.</li> <li>Serve as the ISSM within the site's classified environment.</li> <li>Mentor, train, and develop team members to maintain a high-performing classified cybersecurity capability.</li> <li>Design, implement, and continuously improve security policies, standards, and processes consistent with DoD, DISA, and RMS requirements.</li> <li>Oversee the deployment and validation of security controls across all classified assets, ensuring consistency.</li> <li>Direct risk-based assessments, vulnerability management, and incident response activities.</li> <li>Advise program and engineering teams on secure architecture, system hardening, and compliance with NIST SP 800-53, DISA STIGs, and relevant frameworks.</li> </ul> <h4>Compensation</h4> <p>$115,700 - $150,500</p> <p>The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.</p> <h4>Skills and experience</h4> <p><strong>Required</strong></p> <ul> <li>Active DoD SECRET clearance, with ability to upgrade.</li> <li>Minimum of eight years' progressive experience in cybersecurity, including at least three years in an ISSM or site leadership role overseeing classified systems.</li> <li>Bachelor’s degree from an accredited institution in a relevant field or relevant military education and training.</li> <li>Subject matter expertise with authorization package submission tools (e.g., eMASS) leading to successful Authorization to Operate (ATO) and Authority to Connect (ATC).</li> <li>Demonstrated proficiency with industry-standard information assurance tools required for DCSA system authorizations, such as vulnerability scanning tools (e.g., Evaluate STIG, ACAS), endpoint protection platforms, SIEM/auditing solutions, eMass.</li> <li>Experience with the DCSA Assessment and Authorization Guide (DAAG) or DCSA Assessment and Authorization Process Manual.</li> </ul> <p><strong>Desired skills</strong></p> <ul> <li>Familiarity with one or more of the following frameworks and guides:</li> <ul> <li>Joint Special Access Program (SAP) Implementation Guide (JSIG)</li> <li>Committee on National Security Systems Instruction (CNSSI) 1253</li> <li>NIST SP 800-37 Risk Management Framework (RMF)</li> <li>NIST SP 800-53 Security and Privacy Control Requirements</li> </ul> </ul> <h4>Citizenship requirements</h4> <p>Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.</p> <h4>Drug-free workplaces</h4> <p>Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces. As a condition of employment, candidates will be required to pass a pre-employment drug screen.</p> <h4>Benefits</h4> <p>Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work-life balance, a business casual atmosphere, and comprehensive benefits.</p> <p>Highlights include:</p> <ul> <li>Medical, vision, and dental insurance for employees and dependents</li> <li>Generous paid time off, including 8 designated holidays</li> <li>401(k) with employer contributions</li> <li>Tuition assistance and student loan assistance</li> <li>Wellness and employee assistance resources</li> <li>Employee stock purchase opportunities</li> <li>Short-term and long-term disability coverage</li> </ul> <h4>About us</h4> <p>Saab is a leading defense and security company with an enduring purpose to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in ten U.S. locations.</p> <p>Saab is a company that sees its employees as an asset and offers unlimited opportunities for advancing in your career. We also respect each person’s needs and encourage employees to lead a balanced, rewarding life beyond work. Saab is an Affirmative Action employer for protected veterans and individuals with disabilities. Saab is an Equal Employment Opportunity employer; all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other federal, state, or locally protected category.</p></p><p></p>

<p><h4>Description</h4> <p>The Senior Microsoft Presales Engineer is responsible for driving customer engagement, solution positioning, and technical presales activities across Microsoft Infrastructure, Security, Modern Workplace, and Cloud solutions. The role acts as a trusted technical advisor to enterprise customers, supporting digital transformation initiatives through consultative solution design, technical workshops, demonstrations, and strategic customer engagements.</p> <p>Working closely with Account Managers, Architects, Product teams, and Microsoft stakeholders, the engineer plays a key role in identifying customer requirements, positioning Microsoft technologies, developing technical proposals, and supporting pipeline growth across the region. The role combines deep Microsoft technical expertise with strong customer-facing, presentation, and solution-selling capabilities.</p> <h4>Responsibilities:</h4> <h4>Customer Engagement & Solution Consulting</h4> <ul> <li>Engage with customers to understand: business challenges, security and infrastructure requirements, digital transformation objectives, and existing technology environments</li> <li>Conduct assessments of customer infrastructure, cloud, and security landscapes</li> <li>Support customers in defining technical requirements and contributing to: RFP responses, RFI documentation and technical solution requirements</li> <li>Act as a trusted advisor throughout the customer engagement lifecycle</li> </ul> <h4>Solution Positioning & Technical Presales</h4> <ul> <li>Position Microsoft solutions as best-in-class offerings by articulating: business value, competitive advantages, technical capabilities and security and operational benefits</li> <li>Demonstrate Microsoft solution advantages over competitive technologies and existing customer environments</li> <li>Support customers throughout technical evaluations and decision-making processes</li> <li>Prepare technical proposals, solution presentations, architecture recommendations and technical response documentation</li> </ul> <h4>Microsoft Security, Cloud & Infrastructure Solutions</h4> <ul> <li>Design and position solutions across: Microsoft 365 E3 & E5, Microsoft Security & Compliance solutions, Microsoft Defender Suite, Microsoft Sentinel (SIEM), Azure Active Directory (SSO, MFA, Identity Security), Microsoft Purview and Data Protection solutions, Intune and Endpoint Management, Azure Infrastructure, Backup, DR, and Migration services, Hybrid and on-premise Microsoft infrastructure solutions</li> <li>Support Azure sizing, migration, and modernization discussions with enterprise customers</li> <li>Maintain strong awareness of Microsoft cloud, infrastructure, and security best practices</li> </ul> <h4>Workshops, Demonstrations & Technical Presentations</h4> <ul> <li>Lead customer workshops, technical demonstrations, solution presentations and executive briefings</li> <li>Deliver tailored presentations addressing customer-specific business and technical challenges</li> <li>Educate customers on Microsoft cloud, infrastructure, and cybersecurity capabilities</li> <li>Support customer enablement and awareness initiatives across Microsoft technologies</li> </ul> <h4>Pipeline Development & Sales Support</h4> <ul> <li>Contribute to pipeline generation and opportunity development activities as part of the presales organization</li> <li>Support opportunity qualification, technical validation, and deal progression across strategic customer engagements</li> <li>Collaborate closely with sales and account management teams to align technical and commercial strategies</li> <li>Maintain visibility on opportunity progression and customer engagement activities</li> </ul> <h4>Cross-Functional Collaboration</h4> <ul> <li>Work closely with Account Managers, Technical Architects, Product teams, Delivery teams and Microsoft stakeholders</li> <li>Support successful transition from presales to delivery and implementation phases</li> <li>Collaborate with customer IT and security teams to ensure solution alignment and technical readiness</li> </ul> <h4>Requirements</h4> <ul> <li>8+ years of experience in Microsoft solution sales, technical presales, cloud and infrastructure consulting, enterprise ICT environments</li> <li>Strong expertise across Microsoft Cloud, Security, Productivity, Infrastructure solutions</li> <li>Strong understanding of enterprise security principles, cloud migration and modernization, identity and access management, data protection and compliance solutions</li> <li>Experience supporting enterprise and strategic customer engagements</li> <li>Familiarity with non-Microsoft security technologies such as VMware, Trend Micro EPP/EDR, Forcepoint DLP is highly desirable</li> <li>Bachelor’s degree in Computer Science, Information Technology, Engineering or a related technical field</li> <li>Microsoft cloud and security certifications are an advantage</li> </ul></p><p></p>

<p><h4>Job description</h4> <p><strong>Job role - Principal Engineer – Electrical – Metro Stations</strong><br> Verbal and written communication in English is mandatory.</p> <h4>Responsibilities:</h4> <ul> <li>Lead multi-disciplinary station electrical design: LV/MV building distribution, protection/coordination, earthing & bonding, lightning protection, standby generators & UPS, lighting & controls, across underground, at-grade, and elevated stations.</li> <li>Own the full design lifecycle: requirements capture, basis-of-design, load studies, selectivity/arc-flash reviews, single-lines, schematics, cable schedules, layouts, specs/BOQs, and employer’s requirements. Provide construction support as needed.</li> <li>Apply rail-specific life-safety standards in stations: e.g., NFPA 130 for fixed guideway transit (egress, fire protection, emergency ventilation & control/communications); coordinate with fire/life-safety, ventilation and architectural teams.</li> <li>Design compliant emergency lighting to EN 1838/BS 5266 (escape route, open-area, high-risk task) and produce photometric calculations & layouts (Dialux/Relux).</li> <li>Engineer EMC & earthing interfaces to EN 50121 (railway EMC) and EN 50122-1 (earthing/bonding for fixed installations) and manage interfaces with signaling/telecom/PSD.</li> <li>Coordinate digitally in BIM (Revit/Navisworks) with architecture, structural and MEP; run design reviews, clash prevention and interface matrices.</li> <li>Lead authority approvals (Saudi & UAE Civil Defence and utilities), support client/stakeholder workshops, value engineering and risk registers.</li> <li>Mentor and manage a team of designers; review deliverables, uphold QA/QC; contribute to proposal writing and level-of-effort estimates.</li> </ul> <h4>Qualifications:</h4> <ul> <li>Bachelor’s or Master’s degree in Electrical Engineering.</li> <li>Professional registration (e.g., CEng/PE) strongly preferred.</li> <li>12–18+ years in building/station electrical design with major rail/metro station projects; GCC experience strongly preferred.</li> <li>Strong grasp of NFPA 130, EN 1838/BS 5266 (emergency lighting), EN 50121/EN 50122 (EMC/earthing), BS 7671/IET Wiring Regs or NEC, and typical rail authority requirements.</li> <li>Fluency with ETAP/Amtech, Dialux/Relux, AutoCAD/Revit, and BIM coordination; familiarity with SCADA/BMS interfaces for station systems.</li> <li>Excellent interface management, stakeholder communication and team leadership skills.</li> </ul> <h4>Nice to have:</h4> <ul> <li>Experience integrating station electrical design with PSD, tunnel ventilation controls, SCS/OCS interfaces, and evacuation strategies per NFPA 130.</li> <li>Past authority liaison in KSA (RCRC/SDAIA utilities/Civil Defense).</li> <li>RAMS exposure (EN 50126/8/9) and cyber/physical security considerations for stations.</li> </ul> <p>With over 90 years' combined experience, NES Fircroft (NES) is proud to be the world's leading engineering staffing provider spanning the Oil & Gas, Power & Renewables, Chemicals, Construction & Infrastructure, Life Sciences, Mining and Manufacturing sectors worldwide. With more than 80 offices in 45 countries, we are able to provide our clients with the engineering and technical expertise they need, wherever and whenever it is needed. We offer contractors far more than a traditional recruitment service, supporting with everything from securing visas and work permits, to providing market-leading benefits packages and accommodation, ensuring they are safely and compliantly able to support our clients.</p></p><p></p>

<p><h4>Job description</h4> <p>Saab Inc. is looking for an Information Systems Security Manager (ISSM) to lead onsite cybersecurity efforts for classified programs. This position requires strong expertise in the Risk Management Framework (RMF), defense cybersecurity standards, COMSEC, and technical skills in complex, mission-critical environments. The role is responsible for maintaining the security of the site's classified systems and infrastructure, serving as the facility Information Systems Security Manager (ISSM), and providing expert advice on confidentiality, integrity, and availability.</p> <p>The ISSM will work closely with engineering and program leadership to ensure that security governance, risk management, and compliance are integrated throughout all operational and development activities at the site.</p> <p>This position is eligible for Saab, Inc's relocation package.</p> <h4>Key responsibilities</h4> <ul> <li>Lead the execution of business enablement initiatives, incorporating advanced security principles into classified cyber programs to manage risk effectively, align with customer requirements, and support program success.</li> <li>Provide oversight and guidance to ISSO staff.</li> <li>Serve as the ISSM within the site's classified environment.</li> <li>Mentor, train, and develop team members to maintain a high-performing classified cybersecurity capability.</li> <li>Design, implement, and continuously improve security policies, standards, and processes consistent with DoD, DISA, and RMS requirements.</li> <li>Oversee the deployment and validation of security controls across all classified assets, ensuring consistency.</li> <li>Direct risk-based assessments, vulnerability management, and incident response activities.</li> <li>Advise program and engineering teams on secure architecture, system hardening, and compliance with NIST SP 800-53, DISA STIGs, and relevant frameworks.</li> </ul> <h4>Compensation</h4> <p>$115,700 - $150,500</p> <p>The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.</p> <h4>Skills and experience</h4> <p><strong>Required</strong></p> <ul> <li>Active DoD SECRET clearance, with ability to upgrade.</li> <li>Minimum of eight years' progressive experience in cybersecurity, including at least three years in an ISSM or site leadership role overseeing classified systems.</li> <li>Bachelor’s degree from an accredited institution in a relevant field or relevant military education and training.</li> <li>Subject matter expertise with authorization package submission tools (e.g., eMASS) leading to successful Authorization to Operate (ATO) and Authority to Connect (ATC).</li> <li>Demonstrated proficiency with industry-standard information assurance tools required for DCSA system authorizations, such as vulnerability scanning tools (e.g., Evaluate STIG, ACAS), endpoint protection platforms, SIEM/auditing solutions, eMass.</li> <li>Experience with the DCSA Assessment and Authorization Guide (DAAG) or DCSA Assessment and Authorization Process Manual.</li> </ul> <p><strong>Desired skills</strong></p> <ul> <li>Familiarity with one or more of the following frameworks and guides:</li> <ul> <li>Joint Special Access Program (SAP) Implementation Guide (JSIG)</li> <li>Committee on National Security Systems Instruction (CNSSI) 1253</li> <li>NIST SP 800-37 Risk Management Framework (RMF)</li> <li>NIST SP 800-53 Security and Privacy Control Requirements</li> </ul> </ul> <h4>Citizenship requirements</h4> <p>Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.</p> <h4>Drug-free workplaces</h4> <p>Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces. As a condition of employment, candidates will be required to pass a pre-employment drug screen.</p> <h4>Benefits</h4> <p>Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work-life balance, a business casual atmosphere, and comprehensive benefits.</p> <p>Highlights include:</p> <ul> <li>Medical, vision, and dental insurance for employees and dependents</li> <li>Generous paid time off, including 8 designated holidays</li> <li>401(k) with employer contributions</li> <li>Tuition assistance and student loan assistance</li> <li>Wellness and employee assistance resources</li> <li>Employee stock purchase opportunities</li> <li>Short-term and long-term disability coverage</li> </ul> <h4>About us</h4> <p>Saab is a leading defense and security company with an enduring purpose to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in ten U.S. locations.</p> <p>Saab is a company that sees its employees as an asset and offers unlimited opportunities for advancing in your career. We also respect each person’s needs and encourage employees to lead a balanced, rewarding life beyond work. Saab is an Affirmative Action employer for protected veterans and individuals with disabilities. Saab is an Equal Employment Opportunity employer; all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other federal, state, or locally protected category.</p></p><p></p>

<p>Administer Windows and/or Linux server environments, virtualisation platforms, storage and associated infrastructure services. Monitor availability, capacity and performance; investigate alerts and restore service within agreed priority and escalation procedures. Plan and execute approved patching, configuration changes, hardening and lifecycle maintenance. Maintain server inventories, configuration records, operating procedures, diagrams and technical runbooks. Support incident, problem and change management, including root-cause analysis and corrective actions. Coordinate infrastructure dependencies with network, cloud, backup, cybersecurity, application and database teams. Support discovery, baseline assessment and transition activities for on-premises and any subsequently approved hosted environment. Participate in agreed on-call coverage for critical infrastructure incidents.</p><p><strong>Desired Candidate Profile</strong></p><p>Minimum 6 years of relevant infrastructure and server administration experience. Strong hands-on experience with Windows Server and/or enterprise Linux, Active Directory and virtualisation technologies. Practical knowledge of monitoring, patch management, storage, capacity planning and security hardening. VCP, MCSE/Microsoft role-based certification, RHCSA or Server+ preferred. Ability to produce clear technical documentation and work within controlled change processes. Experience operating hybrid on-premises and cloud environments.</p>

<p><br></p><p>The Role</p><p>As a part-time Security Analyst, you ll own the recurring security, governance and compliance work that keeps wi-Q s certifications strong and our platform trustworthy as we scale. This is a half-time role, working alongside our Engineering and DevOps teams and our senior security leadership. This isn t a helpdesk role and it isn t a 24/7 monitoring desk. You ll be the driving force behind our ISO 27001, PCI DSS and Cyber Essentials Plus programmes, keeping our controls running like clockwork and our evidence audit-ready. It s proactive, autonomous work with a direct impact on the certifications we hold and the enterprise trust we earn.</p><p>Key Responsibilities</p><ul><li>Identity and access governance: oversee access and privileged-access reviews, and help keep our identity and credential management robust as the business grows.</li><li>Third-party and supplier security: run our supplier security review programme and maintain the compliance evidence our certifications and enterprise customers require.</li><li>Customer and enterprise assurance: support our sales and account teams by completing security questionnaires and responding to customer due diligence.</li><li>Vulnerability and patch assurance: oversee vulnerability management, making sure findings are prioritised and driven through to resolution.</li><li>Secure-by-design: review new features and changes (including AI functionality) for security and data-protection impact before release, helping embed secure-by-design across product and engineering.</li><li>Compliance operations: help maintain and evidence our ISO 27001, PCI DSS and Cyber Essentials Plus certifications, and keep us ahead of relevant regulatory change.</li><li>Risk management: carry out security risk assessments and help maintain our risk register, working with teams across the business to manage and reduce risk.</li><li>Security awareness and training: coordinate our security awareness programme and support secure-development training across the team.</li><li>Resilience and incident readiness: support our incident-response exercises, business continuity and backup assurance.</li><li>Documentation and governance: help keep our security policies and documentation accurate, relevant and aligned with how we operate.</li><li>Data protection: support our data-protection obligations, including day-to-day data-handling practices and our responsibilities under GDPR.</li><li>Reporting: provide leadership with clear visibility of our security and compliance posture, flagging risks early.</li></ul><p><strong>Desired Candidate Profile</strong></p><ul><li>Hands-on experience running ISO 27001 ISMS operations and PCI DSS compliance, ideally in a SaaS or technology environment.</li><li>A relevant qualification: ISO 27001 Lead Implementer is the strongest signal for this role (Lead Auditor a bonus), alongside something like CRISC or CompTIA Security+ at mid level, and PCIP for the PCI-specific work.</li><li>Familiarity with Cyber Essentials Plus, access recertification, supplier security reviews and evidence collection.</li><li>A self-starter who works autonomously, chases things to closure, and enjoys turning ad hoc controls into scheduled, evidenced ones.</li><li>A clear communicator who can work well with engineers, HR and an external virtual CISO.</li><li>A pragmatic, data-driven mindset: you care about the control actually working, not just the paperwork looking right.</li><li>Desirable: exposure to GDPR and data-protection operations, GRC tooling, and cloud environments.</li></ul>

<p>In recent years, organizations have been disrupted and transformed by digital technology, cloud adoption, and the increasing need for secure, scalable, and compliant platform foundations. As a Technology Consulting professional, you will collaborate with multidisciplinary teams to help clients define, build, and operate cloud platforms that enable reliable application delivery, enterprise modernization, and measurable business value.</p><p>As organizations look to leverage the advantages that cloud technology offers, EY is committed to helping you develop the right skills needed in today's environment. Working on programs that cross borders and sectors, the experiences you gain here will be truly distinctive. Wherever you start and however long you stay, the exceptional EY experience lasts a lifetime.</p><p><strong>Job Summary</strong></p><p>We are seeking Cloud Architect/Engineer professionals for our Amman office to support cloud transformation engagements across advisory, architecture, engineering, and implementation activities.</p><p>Candidates may be considered for either architecture-focused or engineering-focused responsibilities depending on their experience, technical depth, stakeholder exposure, and interview performance.</p><p>This role is open to candidates with a minimum of 3+ years of relevant cloud experience. Final grade will be decided upon screening and interview completion, within the Senior Consultant to Manager level range.</p><p><strong>Key Responsibilities</strong></p><p><strong>Cloud Architecture &amp; Advisory</strong></p><ul><li>Support or lead architectural design sessions and define target-state cloud platform architectures using Azure or AWS Cloud Adoption Framework and Well-Architected principles.</li><li>Define landing zone standards covering identity and access management, enterprise networking, governance guardrails, policy, tagging, logging, resilience, and observability baselines.</li><li>Design account structures and onboarding standards across Azure Management Groups and Subscriptions, and AWS Organizations, OUs, and Accounts, under a unified governance model.</li><li>Publish enterprise connectivity blueprints including hub-and-spoke, Transit or Virtual WAN, private connectivity, DNS resolution, and firewall patterns.</li><li>Govern platform decisions through architecture review gates, decision logs, documented trade-offs, exception governance, and compensating controls.</li></ul><p><strong>Cloud Engineering &amp; Implementation</strong></p><ul><li>Implement Azure landing zones and account onboarding activities using standard checklists and Infrastructure as Code modules, including Terraform.</li><li>Deliver network foundations including virtual networks, Virtual WAN, DNS resolution, routing, ExpressRoute, VPN, Private Link, and firewall configurations.</li><li>Deploy, configure, and baseline Kubernetes clusters including AKS/EKS, container registry standards, Docker, Helm, cluster add-ons, and operational readiness checks.</li><li>Apply governance guardrails including Azure Policy, AWS SCPs, resource tagging standards, diagnostic settings, and logging configurations.</li><li>Implement identity and access patterns including RBAC, least privilege, service principals, and managed identities as defined by security baselines.</li></ul><p><strong>Delivery, Documentation &amp; Stakeholder Support</strong></p><ul><li>Troubleshoot platform issues, resolve delivery blockers through root-cause analysis, and propose implementation-ready fixes aligned to baseline standards.</li><li>Produce evidence packs and operational handover artefacts including runbooks, monitoring dashboards, escalation paths, and support readiness inputs.</li><li>Contribute to reusable intellectual property including blueprints, IaC modules, templates, checklists, and decision guides.</li><li>Work effectively with architects, security teams, developers, operations teams, and client stakeholders to deliver practical cloud solutions.</li></ul><p><strong>Key Profile Requirements / Qualifications</strong></p><ul><li>Minimum 3+ years of experience in cloud architecture, cloud engineering, cloud infrastructure, platform delivery, or enterprise technology transformation roles.</li><li>Hands-on cloud experience across Azure and/or AWS, including cloud foundations, landing zones, governance, networking, identity, security, and observability.</li><li>Infrastructure as Code experience, preferably with Terraform; Bicep/ARM or CloudFormation experience is an advantage.</li><li>Solid fundamentals in enterprise networking, including VNets/VPCs, subnetting, DNS, load balancing, firewall rules, and private connectivity patterns.</li><li>Experience with Kubernetes, containers, Docker, Helm, AKS/EKS, monitoring, logging, or operational readiness is an advantage.</li><li>Ability to produce clear, structured documentation and consulting-grade deliverables for client delivery and operational handover.</li><li>Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline, or equivalent practical experience.</li><li>Good written and spoken English; Arabic is an advantage.</li></ul><p><strong>Certifications</strong></p><ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104) [Preferred]</li><li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) [Preferred]</li><li>HashiCorp Certified: Terraform Associate [Preferred]</li><li>CNCF Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) [Plus]</li><li>AWS Certified Solutions Architect [Plus]</li></ul><p><strong>What We Look For</strong></p><p>We are looking for cloud professionals who combine hands-on engineering capability with architecture thinking, consulting discipline, structured documentation, and the ability to work effectively in multi-client delivery environments.</p><p><br></p><p><strong>Desired Candidate Profile</strong></p><ul><li>Minimum 3+ years of experience in cloud architecture, cloud engineering, cloud infrastructure, platform delivery, or enterprise technology transformation roles.</li><li>Hands-on cloud experience across Azure and/or AWS, including cloud foundations, landing zones, governance, networking, identity, security, and observability.</li><li>Infrastructure as Code experience, preferably with Terraform; Bicep/ARM or CloudFormation experience is an advantage.</li><li>Solid fundamentals in enterprise networking, including VNets/VPCs, subnetting, DNS, load balancing, firewall rules, and private connectivity patterns.</li><li>Experience with Kubernetes, containers, Docker, Helm, AKS/EKS, monitoring, logging, or operational readiness is an advantage.</li><li>Ability to produce clear, structured documentation and consulting-grade deliverables for client delivery and operational handover.</li><li>Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline, or equivalent practical experience.</li><li>Good written and spoken English; Arabic is an advantage.</li></ul><p><strong>Certifications</strong></p><ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104) [Preferred]</li><li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) [Preferred]</li><li>HashiCorp Certified: Terraform Associate [Preferred]</li><li>CNCF Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD) [Plus]</li><li>AWS Certified Solutions Architect [Plus]</li></ul><p>We are looking for cloud professionals who combine hands-on engineering capability with architecture thinking, consulting discipline, structured documentation, and the ability to work effectively in multi-client delivery environments.</p>