Security Engineer (Cloud & Infrastructure)

Company Profile

As a subsidiary of Kuveyt Türk, Architecht expands its innovative digital products and services on a global scale.

• Our technology company exports the BOA Banking Platform, developed at our R&D Center, to 20 countries. In addition to traditional and platform banking solutions, we focus on open banking, cloud technologies, advanced analytics, artificial intelligence, and mobile security solutions.

Key Responsibilities

• Deploy, configure, and maintain the organization’s network and security infrastructure, including firewalls, WAFs, load balancers, switches, and access points
• Manage Web Application Firewall (WAF) solutions across Azure WAF and Cloudflare WAF, including rule creation, hardening, and application/domain-specific protection
• Administer Azure native security services, including; Defender for Cloud , Azure Firewall, Entra ID, Privileged Identity Management (PIM), Conditional Access Policies
• Manage and operate endpoint security solutions (EDR, XDR, SIEM) across all corporate devices, ensuring security policies are up to date and effective
• Implement and oversee data security controls, including data classification, DLP, and encryption to prevent unauthorized data leakage
• Operate the vulnerability management process; coordinate remediation actions with relevant teams and track closure
• Monitor emerging threats and vulnerabilities; plan and execute patching, updates, and system hardening activities proactively
• Coordinate internal and external penetration tests, document findings, and track remediation plans
• Manage URL filtering policies in line with corporate security standards
• Assess security requirements for new projects and provide guidance during design and implementation phases
• Ensure compliance with information security standards and regulations (ISO 27001, ISO 27017, ISO 27701, etc.) and support audit activities
• Maintain up-to-date security documentation, including configurations, policies, procedures, and architecture documents

Required Qualifications

• Bachelor’s degree in Computer Science / Engineering, Electrical-Electronics Engineering, Mathematics Engineering, Management Information Systems, or a related engineering discipline
• Minimum 3 years of hands-on experience in IT security, network administration, or infrastructure security
• Experience in the financial or technology sector is a plus
• Strong technical knowledge of network and security technologies, including; WAF, Next-generation firewalls (NGFW), Load balancers, Endpoint and cloud security solutions.
• Experience with one or more of the following tools is preferred: Microsoft Defender, Symantec Endpoint Security, Cortex XDR, Tenable Nessus, Forcepoint, CrowdStrike, Splunk, Microsoft Sentinel
• Solid understanding of data security practices, including backup/restore and data protection methodologies
• CCNA-level networking knowledge (TCP/IP, routing, switching, VLAN design)
• Experience in Windows Server and Linux administration and security hardening
• Strong analytical and problem-solving skills with a proactive, detail-oriented mindset
• Ability to collaborate with multiple technical teams and clearly communicate security concepts to non-technical stakeholders
• Professional working proficiency in English, sufficient for research and technical documentation
• Experience with scripting or automation (PowerShell, Python, KQL, SPL) is a plus
• Experience with cloud security, preferably on Azure certifications (AZ-900, AZ-500) is a plus
• Basic knowledge of DevSecOps, microservices, and container technologies (Docker, Kubernetes) is a plus