Senior Cloud Security Architect – Zero Trust & Enterprise Security

Talenzon; Dubai; On-site; AED 360,000 - 540,000; Full time

Job summary

Talenzon is seeking a Senior Cloud Security Architect to join on-site in Dubai. You will design secure cloud architectures across AWS, define security standards, and work with cloud engineering, DevOps, and cybersecurity teams to protect critical workloads.

You will implement IAM, Zero Trust, encryption, and threat modelling while integrating security into CI/CD and IaC workflows. Excellent English is required.

Qualifications

• 7+ years of experience in cybersecurity, cloud security, or infrastructure architecture.
• Strong hands-on knowledge of AWS security services and cloud architecture.
• Expertise in IAM, networking, encryption, key management, and secrets management.

Responsibilities

• Design secure cloud architectures across AWS environments and multi-account structures.
• Define network segmentation, private connectivity, security boundaries, and workload isolation.
• Establish security reference architectures and conduct threat modelling for new platforms.
• Implement security controls using AWS Security Hub, GuardDuty, Config, and Inspector.
• Develop cloud security policies and remediation standards; support audit readiness.

Skills

Cloud security architecture

AWS security services

IAM & zero trust

Threat modelling

CI/CD security

Security automation

Tools

Terraform

Job description

We are looking for a Senior Cloud Security Architect with strong experience in cloud security architecture, identity management, and Zero Trust principles to join our client’s on-site team in Dubai.

This role focuses on designing and implementing secure cloud environments across enterprise infrastructure, applications, and distributed systems. You will define security architectures, establish technical standards, and work closely with cloud engineering, DevOps, and cybersecurity teams to protect critical workloads and sensitive data.

What You’ll Do

Cloud Security Architecture

• Design secure cloud architectures across AWS environments, including multi-account structures and centralized security controls.
• Define network segmentation, private connectivity, security boundaries, and workload isolation.
• Establish security reference architectures aligned with cloud security best practices.
• Conduct architecture reviews and threat modelling for new platforms and applications.

Identity & Zero Trust

• Implement identity and access management policies using AWS IAM, IAM Identity Center, and role-based access controls.
• Apply least-privilege access principles and temporary credential strategies.
• Design workload identity and service-to-service authentication patterns.
• Integrate centralized identity providers and multifactor authentication.

Infrastructure & Application Security

• Implement security controls using AWS Security Hub, GuardDuty, AWS Config, and Amazon Inspector.
• Define encryption standards using AWS KMS and manage secrets through AWS Secrets Manager.
• Integrate security checks into CI/CD pipelines and Infrastructure-as-Code workflows.
• Assess vulnerabilities, misconfigurations, and risks across cloud workloads.

Governance & Incident Readiness

• Develop cloud security policies, architecture documentation, and remediation standards.
• Support audit readiness and compliance initiatives.
• Establish security monitoring, alerting, and incident response procedures.
• Collaborate with engineering teams to remediate security findings.

What We’re Looking For

Required Skills & Experience

• 7+ years of experience in cybersecurity, cloud security, or infrastructure architecture.
• Strong hands‑on knowledge of AWS security services and cloud architecture.
• Expertise in IAM, networking, encryption, key management, and secrets management.
• Experience with AWS Security Hub, GuardDuty, AWS Config, and CloudTrail.
• Knowledge of Terraform and security automation.
• Experience with threat modelling and security architecture reviews.
• Understanding of Zero Trust principles and least‑privilege access.
• Excellent English communication skills and the ability to collaborate with international teams on‑site.

Nice to Have

• Experience in FinTech, banking, payments, or other regulated industries.
• Knowledge of PCI DSS, ISO 27001, and SOC 2 controls.
• AWS Certified Security – Specialty or an equivalent security certification.
• Experience with SIEM integrations and cloud security posture management.

Location: Dubai, UAE Work Model: On-site Role Type: Full-Time Language: English required