Senior Security Architect: Cloud, IAM & Crypto

DeepLight AI is a specialist AI and data consultancy with extensive experience implementing intelligent enterprise systems across multiple industries, with particular depth in financial services and banking. Our team combines deep expertise in data science, statistical modeling, AI/ML technologies, workflow automation, and systems integration with a practical understanding of complex business operations.

DeepLight AI is a specialist AI and data consultancy dedicated to transforming the regional corporate landscape through bespoke, high-impact intelligent systems. Based in the UAE, we partner with organizations across diverse sectors—with a deep-rooted expertise in Financial Services and Banking—to bridge the gap between complex data and actionable business strategy.

At DeepLight, we don't believe in "off-the-shelf" fixes. We deliver tailored AI solutions designed to integrate seamlessly into existing enterprise architectures, ensuring that innovation is both scalable and secure. From building robust data foundations to deploying sophisticated AI platforms, we empower our clients to lead in an increasingly automated world.

The Principal Security Engineer is the highest-level technical engineering authority within Deeplight consultancy, embedded directly within a major banking client. The role is responsible for the overarching design, structural integrity, and hands‑on implementation of core security controls across the bank’s enterprise systems and infrastructure. Operating as a subject matter expert in cloud architectures, cryptographic controls, and identity ecosystems, this position works alongside enterprise architects and senior engineering squads to solve complex security challenges, ensuring the bank's digital assets are defended in strict alignment with global financial regulatory standards.

Your responsibilities in this role include:

• Architectural Design & Blueprinting: Lead the technical design of robust security patterns, reference architectures, and engineering baselines across cloud, hybrid, and on‑premises systems.
• Control Implementation: Oversee and execute the deployment of complex, enterprise‑grade security controls, focusing heavily on Identity and Access Management (IAM), data protection, and cryptographic infrastructures.
• Technical Authority: Serve as the final escalation point and engineering authority for complex security flaws, configuration issues, and infrastructure vulnerabilities within the delivery workstreams.
• Encryption & Data Protection: Define, design, and implement enterprise encryption standards, key management lifecycles (PKI/KMS), and tokenization strategies to protect sensitive financial data at rest and in transit.
• Engineering Enablement: Provide deep technical mentorship to senior and mid‑level security engineers, establishing engineering best practices and validating code or infrastructure‑as‑code (IaC) templates.
• Strategic Advisory: Collaborate with senior leadership, risk committees, and client architecture boards to evaluate emerging technologies and ensure engineering roadmaps match the institution's risk tolerance.

As an AI consultancy, our greatest asset is the expertise of our people. While technical mastery is the foundation of what we do, the ability to bridge the gap between complex data science and actionable business value is what defines your success with Deeplight. We’re looking for individuals who are not only world‑class in their fields of specialism, but also compelling communicators and persuasive advocates for their own skills. You will be the face of our firm, tasked with building trust, articulating the "why" behind your technical decisions, and effectively "selling" your vision to high‑level stakeholders. If you thrive on the challenge of presenting cutting‑edge solutions as much as you do on building them, you will fit right in.

We need you to have:

• Professional Tenure: Minimum of 10 years in information security, system engineering, or infrastructure design, with at least 4 years operating in a Principal or Lead Engineer capacity.
• Financial Services Context: Proven experience designing and engineering security controls within a highly regulated tier‑1 or tier‑2 banking infrastructure.
• Consulting Delivery: Prior experience in a client‑facing professional services or senior consultancy role, managing complex technical deliverables and executive engineering relationships.
• Infrastructure as Code (IaC): Extensive hands‑on experience deploying secure, automated infrastructure using enterprise tools (e.g., Terraform, CloudFormation) within CI/CD pipelines.
• Security Architecture Mastery: Advanced capability to design end‑to‑end, zero‑trust security frameworks for highly complex distributed systems and financial platforms.
• Cloud Security Engineering: Deep technical proficiency in building and securing native infrastructure and multi‑tenant platforms within major cloud providers (AWS and Azure).
• Identity & Access Management (IAM): Expert knowledge of enterprise IAM protocols, directory services, federated identities, and privileged access management (PAM) architectures (e.g., OAuth, SAML, OIDC).
• Cryptography & Encryption: Thorough practical knowledge of symmetric/asymmetric encryption, cryptographic protocols, hashing, and hardware/cloud security modules (HSMs/KMS).
• Technical Influence: Capacity to drive technical consensus and influence senior engineering leads and enterprise architects toward secure design choices.

It would also be great if you have:

• Professional Certifications: Advanced designations such as CISSP-ISSAP (Information Systems Security Architecture Professional), CCSP, AWS Certified Security - Specialty, or Microsoft Certified: Azure Security Engineer.
• AI/ML Infrastructure Security: Familiarity with securing automated data science pipelines, model deployment architectures, and MLOps platforms.
• Application Security: Conceptual understanding of secure coding practices, API gateway security, and microservices mesh architectures.

The benefits you'll enjoy as part of this role include:

• Competitive salary
• Comprehensive personal health insurance
• Visa Sponsorship for the successful individual
• Professional development and certification support
• Subscription reimbursement relating to your role
• Opportunity to work on cutting‑edge AI projects
• Monthly Employee Incentive program
• Career advancement opportunities in a rapidly growing AI company

This position offers a unique opportunity to shape the future of AI implementation while working with a talented team of professionals at the forefront of technological innovation. The successful candidate will play a crucial role in driving our company's success in delivering transformative AI solutions to our clients.

At DeepLight AI, we recognise that diversity drives innovation. We are committed to fostering an inclusive environment where individuals with different thinking styles can thrive and contribute their unique strengths to our specialised AI and data solutions.

Our goal is to ensure our application and interview process is accessible, predictable, and fair for all candidates.

If you require any specific adjustments to the application process, or if you require any reasonable adjustments should you be successful in being processed to the interview stage, please do let us know. This information will be kept strictly confidential and will not impact hiring decisions.