مهندس أمن سحابي

About the role

Cloud Security Engineer

Location: Riyadh, Saudi Arabia
Work Mode: On-site
Experience: 8+ Years
Contract Duration: 1 Year (Extendable)
Availability: Immediate Joiners Only
Candidate Location: Currently residing in Saudi Arabia
Iqama Requirement: Valid Iqama required

Job Overview

DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments. The ideal candidate will have hands-on expertise in cloud security, DevSecOps, infrastructure automation, container and Kubernetes security, identity and access management, and regulatory compliance.

The role involves implementing cloud security controls, integrating security tools into CI/CD pipelines, protecting cloud workloads, monitoring threats, and supporting compliance with relevant Saudi Arabian cybersecurity requirements.

Key Responsibilities

• Design, implement, and maintain security controls across AWS, Microsoft Azure, or Google Cloud Platform (GCP).

• Integrate security scanning tools into CI/CD pipelines to support secure software delivery.

• Apply Infrastructure-as-Code security practices using tools such as Terraform and Ansible.

• Secure Docker containers and Kubernetes clusters through access controls, network policies, and image scanning.

• Implement cloud IAM, federated identity, single sign-on (SSO), and least-privilege access models.

• Monitor cloud environments using native security and monitoring tools to detect threats and support incident response.

• Support compliance activities aligned with applicable Saudi cybersecurity requirements, including NCA and SAMA frameworks where relevant.

• Identify cloud security risks, investigate incidents, and recommend remediation measures.

• Collaborate with infrastructure, DevOps, and security teams to improve cloud security posture.

Required Skills and Qualifications

• Minimum 8 years of relevant professional experience.

• Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or GCP.

• Experience with DevSecOps, Infrastructure-as-Code, and CI/CD security integration.

• Knowledge of Terraform, Ansible, and security scanning tools such as Twistlock, Aqua, or Snyk.

• Hands-on knowledge of Docker and Kubernetes security, including RBAC, network policies, and image scanning.

• Experience with cloud IAM, federated identity, SSO, and least-privilege access.

• Familiarity with NCA and SAMA cybersecurity requirements, as applicable.

• Experience using cloud-native monitoring tools such as AWS CloudTrail, Azure Monitor, and Microsoft Defender for Cloud (formerly Azure Security Center).

• Understanding of cloud threat detection, incident response, and security remediation.

• Relevant cloud security certifications, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate, are advantageous.

• Must currently reside in Saudi Arabia and hold a valid Iqama.

• Immediate joining is mandatory.

• Willingness to work onsite in Riyadh, Saudi Arabia.