Senior Cloud Security Engineer

About the role

A Senior Cloud Security Engineer works closely with cloud, infrastructure, network, endpoint and application teams to design, implement and maintain enterprise security controls protecting clients' digital environments. The role covers Identity and Access Management, Data Security, Cloud Security, Endpoint Security and Network Security, and supports hybrid IT environments.

Key responsibilities

• Assess enterprise IT and cloud environments to identify security risks and recommend controls across identity, data, network, endpoint and cloud domains, and review infrastructure, configurations and deployments.
• Implement and support IAM controls such as RBAC, least privilege, MFA, PAM and identity governance.
• Help implement data protection controls including data classification, encryption, key management, DLP and secure data handling.
• Support secure configuration and monitoring of public, private and hybrid cloud platforms, including workload protection, logging and compliance monitoring.
• Support endpoint protection (EDR/XDR, antivirus, device control, patch management, hardening) and assist in incident investigation and response.
• Maintain documentation on configurations, risk assessments, incident reports and procedures, and share security posture updates with stakeholders and clients.

Required profile

• Bachelor's or college degree in Computer Science, Information Security or a related field.
• At least 6 years of experience in cloud security, cloud infrastructure, cybersecurity operations or a closely related role.
• Relevant certifications are highly desirable, such as AZ-500, SC-300, AZ-104, CompTIA Security+ or CySA+, ISC2 (CC or SSCP), CSA or other cloud security certifications.
• Knowledge of Qatar National Information Assurance (NIA) is a plus.

Required skills

• Hands-on experience with Entra ID and Active Directory, EDR/XDR, firewalls, IDS/IPS, VPN, SIEM and log monitoring, encryption and key management, and vulnerability management tools.
• Strong understanding of defense-in-depth, zero trust, least privilege, segmentation, encryption, vulnerability management and incident response.
• Familiarity with CIS Benchmarks, NIST, ISO 27001 and general compliance and governance concepts.