Principal Security Architecture at Safaricom Kenya

Brief Description

Reporting to the Senior Manager – Technology Security Architecture, Design & Assurance, the position holder will define, analyze and periodically review the security strategy and roadmap based on evolving threat landscape and ensure risks identified are mitigated. He/she will be responsible for architecting and designing security systems in line with best practices to ensure they meet user requirements including adequate capacity and performance

Detailed Description

• Define, analyze and periodically review the security strategy and roadmap based on evolving threat landscape and ensure risks identified are mitigated
• Architect and design security systems in line with best practices to ensure they meet user requirements including adequate capacity and performance.
• Define security requirements and acceptance criteria for new systems
• Draft and evaluate RFIs/RFPs
• Liaise with Supply Chain in the procurement process
• Do the technical evaluations for security systems and other systems regarding security
• Select the best solution and present to the budget governance board
• Ensure all vendors have up-to-date contracts (contract management)
• Implement, Test, Deploy and Commission new systems
• Ensure proper change management and system handover processes are followed
• Recommend major upgrades where required and liaise with the operations team when doing the upgrades especially if it affects the design/architecture of the system
• Ensure all security technology and processes implemented are continually improved to maximize on their returns/benefits
• Manage all aspects of projects and vendor related issues in line with PRINCE2 best practices
• Define metrics and report periodically that clearly demonstrate return on security investment (ROSI)
• Conduct research and development/security intelligence on new areas in security and present on them for sensitization and knowledge transfer to other team members/staff
• Ensure all security systems implemented have high availability and disaster recovery in accordance with best practices
• Champion managed security services and support EBU/CBU in crafting and selling these services

Job Requirements

• Degree in Electrical Eng/Computer Science/Information Technology
• Advanced professional information security certifications e.g. CISSP/CISM/CISA/GIAC/CEH/CPTP/OCSP
• Advanced Networking certifications e.g. CCNA Security/CCNP/CCIE
• Certifications in Microsoft Windows and Linux/Unix Operating Systems
• Certifications in the use and administration of security tools e.g. Firewalls/IDS/Content Filters/Antivirus/Ethical Hacking tools
• Certifications in virtualization technologies: VMware, HyperV, Open Stack

Additional Details

• Minimum of 5 years’ experience in Information Systems Security – e.g. Penetration Testing, Vulnerability Assessments, IDS/Firewalls/VPN administration, Content Filters, Security Hacking tools, Antivirus, Encryption etc…
• Minimum of 5 years’ experience in Networks and Systems Administration e.g.  Cisco, Huawei, Windows, Linux, Unix etc…
• Working knowledge of web technologies e.g. cPanel, ModSecurity, Apache, PHP, Joomla, Wordpress and ASP
• Working knowledge of databases e.g. Oracle, MSSQL, MySQL, Postgress SQL
• Working knowledge of Virtualization Technologies e.g. VmWare, HyperV, Open Stack
• Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD, SS7 etc…
• Working knowledge of encryption e.g. PKI, PGP, AES, 3DES, RSA 
• Excellent communication skills and team player.
• Excellent project management skills and proven task execution (getting things done).  
• Superior report writing and presentation skills.
• Very analytical and logical thinking
• Self-driven with minimal supervision
• Customer focused