Engineer - Cloud Security Architect

Job Description

We are seeking an experienced Cloud Security Engineer / Analyst to join our Cybersecurity Practice. In this role, you will work closely with cloud, infrastructure, and security teams to design, implement, and maintain security controls that protect client cloud environments.

Your responsibilities will include assessing cloud architectures, identifying security risks, implementing security best practices, and continuously monitoring cloud platforms to ensure confidentiality, integrity, and availability of systems and data. You will support secure adoption of cloud services across public, private, and hybrid environments, ensuring compliance with organizational policies, industry standards, and Qatari regulatory requirements.

You will collaborate with cloud architects, Dev Ops, and application teams to embed security throughout the cloud lifecycle, including design, deployment, and operations. The role requires strong hands‑on technical expertise, analytical skills, and the ability to translate security requirements into scalable cloud security solutions.

• Cloud Security Architecture & Assessment:
  Assess cloud environments (public/private/hybrid), identify risks, review configurations, and provide remediation recommendations across compute, storage, network, identity, and platform services.
• Cloud Security Governance:
  Define and maintain security policies, standards, baselines, and governance frameworks. Establish RACI models and support operational procedures for consistent enforcement.
• Security Monitoring & Threat Detection:
  Implement monitoring solutions to detect misconfigurations, vulnerabilities, and threats; analyze alerts and support incident response and remediation.
• Identity & Access Management:
  Ensure secure IAM implementation including RBAC, least privilege, authentication, and authorization controls.
• Cloud Security Compliance:
  Ensure compliance with organizational policies, regulatory requirements, and security standards; support continuous monitoring and remediation.
• Dev Sec Ops  & Automation:
  Integrate security into CI/CD pipelines and IaC workflows; promote automation for scalable security controls.
• Security Tools & Technologies:
  Manage CNAPP solutions (e.g., Palo Alto Prisma Cloud, Microsoft Defender) covering posture management, workload protection, identity security, and runtime protection.
• Documentation & Reporting:
  Maintain security documentation, assessments, and reports for stakeholders.
• Training & Awareness:
  Conduct knowledge‑sharing sessions and promote secure cloud practices across teams.

• Education:
  
  Bachelor’s degree in Computer Science, Information Security, or related field.
• Experience:
  
  Minimum 2 years in cloud security, cloud infrastructure, or cybersecurity operations.

• Oracle Cloud Infrastructure Security Professional
• Microsoft Azure Security Engineer Associate (AZ‑500)
• AWS / GCP security certifications
• Vendor‑neutral certifications (CSA, GIAC)
• General cybersecurity certifications (CompTIA, ISC2)

• Cloud security tools:
  Microsoft Defender for Cloud, Azure Policy, Entra , OCI Cloud Guard
• IAM, RBAC, and identity governance
• Network security controls (NSGs, routing, security lists)
• Encryption & key management (Azure Key Vault / OCI Vault)
• Logging & monitoring (Azure Monitor, Log Analytics, OCI Logging)
• Infrastructure as Code (Terraform, ARM, Bicep)
• CI/CD security integration (preferred)

• Cloud security principles: shared responsibility, segmentation, hardening, vulnerability management, incident response
• Frameworks: CIS Benchmarks, NIST, ISO 27001, CSA Cloud Controls Matrix
• Dev Sec Ops  and CI/CD practices
• Qatar National Information Assurance (NIA) guidelines (plus)