Senior Cloud Security Architect & Advisory Leader

KPMG Middle East; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

KPMG Middle East is seeking an experienced Cloud Security Architect to lead security design and advisory for client cloud environments in the UAE. The role combines hands-on engineering with strategic guidance across Azure, multi-clouds and governance frameworks.

The ideal candidate can assess risk, map controls to CIS/NIST/ISO baselines, and drive security transformations for complex engagements while maintaining high quality and stakeholder communication.

Qualifications

• Strong track record in cloud security architecture and consulting.
• Hands-on experience with Microsoft Azure and Microsoft 365.
• Experience in secure cloud migration and landing zone design.
• Knowledge of security controls across Azure and cloud services.
• Familiarity with CIS, NIST, ISO and CAF baselines.

Responsibilities

• Understand client challenges, cloud ambitions, regulatory requirements and threat landscape.
• Advise on secure cloud adoption, lift-and-shift migration and landing zone security.
• Design and implement security controls across Azure landing zones (identity, networking, logging, governance, encryption).
• Support security architecture across Azure, M365, AWS and OCI environments.
• Navigate cybersecurity regulations, frameworks, and cloud compliance requirements.
• Contribute to cloud security governance, risk management and control frameworks.
• Assess cloud environments against security baselines and best practices.
• Deliver automation of security controls, posture reporting and risk dashboards.

Skills

Cloud security architecture

Azure

Identity & access mgmt

Security governance

DevSecOps

Multi-cloud security

Client advisory

Big4 experience

Job description

KPMG Middle East is seeking an experienced Cloud Security Architect to lead security design and advisory for client cloud environments in the UAE. The role combines hands-on engineering with strategic guidance across Azure, multi-clouds and governance frameworks.

The ideal candidate can assess risk, map controls to CIS/NIST/ISO baselines, and drive security transformations for complex engagements while maintaining high quality and stakeholder communication.