Cyber Security Engineer

About the role

PUNCH Cyber Analytics Group is seeking an experienced Cyber Security Engineer to lead the design and implementation of Zero Trust security architecture across its diverse client base.

Key responsibilities

• Define and maintain Zero Trust security architecture aligned with business and security objectives.
• Develop roadmaps, maturity models, and implementation plans covering people, processes, applications, data, devices, and infrastructure.
• Design network segmentation and micro‑segmentation to limit lateral movement.
• Establish identity‑centric controls such as MFA, SSO, identity governance, and least‑privilege access.
• Define policy‑based access controls using identity, device posture, risk, location, application, and behavioral signals.
• Set device trust and endpoint security requirements, including compliance, health checks, encryption, patching, and EDR coverage.
• Develop data‑centric controls such as classification, encryption, DLP, and rights management.
• Assess existing infrastructure against Zero Trust frameworks (e.g., NIST Zero Trust Architecture) and identify gaps.

Required profile

• Minimum 7 years of relevant experience (or 9 years total experience without a bachelor’s degree).
• Ability to work independently and as part of a team.
• Flexibility to support after‑hours maintenance activities.
• Eligibility to obtain a Position of Public Trust.

Required skills

• Experience with Zero Trust architecture and NIST 800‑53 guidelines.
• Hands‑on knowledge of Cisco, Juniper, Riverbed, and Fortinet security devices.
• Implementation of MFA, SSO, and identity governance solutions.
• Endpoint detection and response (EDR) and data loss prevention (DLP) technologies.
• Data encryption and classification techniques.