Job Summary
In this role, you will lead the security architecture across core mobile networks, transmission systems, Access, Cloud and critical data center facilities. You will drive advanced threat mitigation strategies, oversee vendor technical evaluations, manage security Requests for Proposals (RFPs), and steer the architecture toward robust, resilient, and future-proof standards (including post-quantum readiness and zero-trust principles).
Key Responsibilities
- Lead the end-to-end security architecture design for core mobile networks (EPC, 5GC, IMS) and transmission networks, ensuring strict adherence to international telecom security standards (3GPP, GSMA).
- Architect and optimize Security Gateways (Sec-GW), Gi/Gp/APN firewalls, and NR firewalls to protect signaling, data paths, and subscriber privacy.
- Direct transmission network security initiatives, focusing on network isolation, NOC site hardening, touchpoint protection, and secure remote administrative access architectures.
- Oversee Public Key Infrastructure (PKI) deployments, certificate lifecycle management, and cryptographic controls across network elements and management systems.
- Spearhead technical evaluations, build comprehensive RFPs, review vendor security submissions, and guide capacity planning and security insourcing initiatives.
- Validate integration of security nodes with surrounding network elements (mobile core, transport, access, OSS/BSS) and ensure end-to-end protection consistency.
- Collaborate with cross-functional engineering and operations teams to execute black-box penetration testing, vulnerability remediation, and automated security posture validation (e.g., DNSSEC and automated NATting pools).
- Mentor and guide team members in analysis methodologies, tools, and optimization best practices.
Education
- Bachelor’s degree in Telecommunications, Electronics, or Computer Engineering.
- Master’s degree in a related field is a plus.
Qualifications & Skills
- Bachelor’s degree in Telecommunications, Computer Engineering, Cybersecurity or related field (Master’s preferred).
- 7-9 years of experience in telecom security and security architecture, including 2+ years in a leadership role.
- Strong technical expertise in telecom security platforms (e.g., Palo Alto, Fortinet, Juniper, F5, Nokia).
- Experience with performance tuning, capacity management, and post-deployment analysis.
- Solid understanding of 5G/4G mobile core, IMS, IP-Core, and fixed access security domains.
- Knowledge of security standards and frameworks such as 3GPP, NIST, ISO 27001, and ETSI.
- Excellent reporting, analytical, and coordination skills with a focus on detail and accuracy.
- Demonstrated experience managing technical vendor evaluations, writing complex RFP technical scopes, and leading security transformation or insourcing projects.
Certifications
- CCNP or CCIE Security / HCIE Security / JNCIP-Sec or JNCIE Security (Recommended)
- CISSP - CISM - SABSA- ISO/IEC 27001 Lead Implementer or Auditor (Preferred)
- 3GPP / GSMA NESAS Security (Preferred)
Additional advantage
- GCIH / CEH / 5G Core Specialist Certification
- 5G/4G Network Optimization Certification (Vendor / 3GPP-based)
- Python / Data Analytics Certification (e.g., Power BI, Machine Learning basics)
- Cloud or NFV/SDN Fundamentals (AWS, Kubernetes, or OpenStack)
