Security Architect (Delivery) - Madagascar
JOB DESCRIPTION Security Architect (Delivery) Information Technology |
Ref.: DIA-2026-IT-20 |
■ Location | ■ Seniority | ■ Estimated duration | ■ Contract |
Madagascar – Remote | Expert – 10+ years | 6 months to 1 year | To be confirmed |
ABOUT THE PROJECT
Our client, an international multi-entity group, is building a security-critical, privacy-first information system on its own on-premise infrastructure: hardened mobile and desktop applications, hardware-key authentication, legally isolated data for each group entity, and self-hosted finance and AI capabilities.
The programme is delivered by a senior, multi-disciplinary team working in two-week agile sprints, with compartmentalised access and a strong culture of security by design.
WORK ARRANGEMENT
This is a remote position: you will work from home, from Madagascar. No attendance at DI-Africa's offices is required.
THE ROLE
Own the security architecture during delivery: threat model, PKI / HSM, hardware-key policy, emergency revocation and re-imaging procedures, change control and incident response runbooks.
KEY RESPONSIBILITIES
● Build and maintain the threat model (private network, custody, multi-entity).
● Define PKI / HSM, FIDO2 and update-signing policies.
● Design emergency revocation layers, lost-key freeze and device re-imaging procedures.
● Run change control on the approval matrix and staged vulnerability management (SBOM / CVE).
● Write ceremony and incident response runbooks, and review physical data center security.
TECHNICAL ENVIRONMENT
● Enough Go and Rust to review authentication / authorisation and capabilities.
● Python for tooling.
● PKI / HSM, FIDO2, SBOM.
PROFILE
Location | ● Based in Madagascar, working remotely from home. |
Experience | ● Expert – 10+ years of relevant professional experience. |
Required skills | ● Security architecture (beyond AppSec checklists). ● Ceremony and incident response runbooks. ● Privacy and metadata-leak awareness. ● Expert compartmentalisation. |
Nice to have | ● I2P / Tor threat models. ● Bitcoin custody review. ● ISO 27001. ● Red team. |
Languages | ● Professional English required; French is a plus. |
Ways of working | ● Work independently and act as a reference for the engineering team. ● Write architecture and security documentation. ● Willingness to handle hardware: YubiKeys, HSMs, air-gapped machines, phone flashing. ● Comfortable working with compartmentalised access. ● Proactive, requiring minimal supervision or mentoring. ● Proactive in identifying potential problems and implementing solutions. ● Efficient time management and respect of deadlines. ● Practical experience with agile software development methods. |
HR Consulting · www.di-africa.com
Confidential – For recruitment purposes only
About DI-Africa
DI-Africa supports industrial, mining, oil & gas and services groups with their hiring across Africa: Employer of Record (EOR), recruitment & sourcing, payroll & compliance, immigration & work permits, international mobility, health insurance.
Our recruitment process
- Online application — acknowledgement within 48 hours.
- DI-Africa interview — conversation with a recruitment consultant.
- Client interview — short-list presented to the client.
- Offer & onboarding — we support you until your first day.