Cloud Security Engineering Lead

Role overview

Architecture and engineering

• Own cloud security architecture and engineering from design through implementation, stabilization, and operational handover.
• Assess Azure, Microsoft 365, hybrid, and relevant multicloud environments for gaps, dependencies, and control improvements.
• Implement Microsoft identity, endpoint, cloud security, detection, and information-protection capabilities, including Entra ID, Defender, Intune, Sentinel, and Purview.
• Improve posture management, workload protection, attack-path reduction, security configuration, logging, and monitoring across IaaS, PaaS, SaaS, endpoint, and identity environments.

Integration and delivery

• Integrate cloud platforms with Security Operations through SIEM/SOAR telemetry, detection use cases, KQL analytics, incident automation, and threat intelligence.
• Apply Zero Trust across identity, privileged access, endpoints, applications, network access, collaboration, and data.
• Develop secure hybrid connectivity and access patterns with network security teams, including segmentation, firewalling, remote access, private connectivity, and DNS.
• Lead technical design, reviews, proof-of-concept activities, testing, troubleshooting, and remediation; challenge vendor and partner proposals against KAUST standards.

Governance and handover

• Coordinate dependencies across IAM, Saviynt IGA, network security, cyber exposure reduction, security operations, endpoint, infrastructure, and application teams.
• Support migration from legacy platforms, addressing sequencing, coexistence, rollback, and operational continuity.
• Define acceptance criteria, validation evidence, baselines, implementation standards, and production-readiness requirements.
• Produce as-built designs, configuration standards, runbooks, operational procedures, and knowledge-transfer materials; upskill internal teams.

Qualifications and skills

• Bachelor’s degree in a closely related discipline is required; substantial equivalent professional experience may be considered.
• Requires deep hands-on Azure and Microsoft 365 security engineering expertise and strong knowledge of Microsoft security technologies.
• Requires enterprise cloud security architecture expertise, practical Zero Trust implementation, and understanding of SIEM/SOAR, detection engineering, KQL or comparable query languages, and SOC integration.
• Requires experience with cloud posture management, workload hardening, attack-path analysis, baselines, and remediation across IaaS, PaaS, and SaaS.
• Advanced Microsoft certifications are strongly preferred; relevant cloud or cybersecurity certifications are advantageous and do not replace hands-on experience.
• Requires technical judgment, ability to lead multidisciplinary teams while remaining hands-on, and strong communication with technical and senior stakeholders.