Cloud Security Architect – DevSecOps & Compliance

Malomatia; Doha; On-site; QAR 240,000 - 420,000; Full time

Job summary

malomatia in Doha, Qatar, seeks an experienced Cloud Security Engineer to join our Cybersecurity Practice. You will design, implement, and maintain security controls for clients’ cloud environments, across public, private, and hybrid setups, ensuring confidentiality, integrity, and availability of data.

You will work with cloud architects, DevOps, and application teams to embed security into the cloud lifecycle, perform risk assessments, enforce security best practices, and monitor platforms

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• At least 3 years in cloud security or related roles.
• Relevant cloud security certifications are desirable.

Responsibilities

• Assess cloud architectures and implement security controls across public, private, and hybrid clouds.
• Define governance frameworks and ensure alignment with regulatory requirements.
• Monitor cloud environments and investigate security incidents with remediation.
• Support secure adoption of cloud services and automate security checks in CI/CD.
• Collaborate with cloud architects, DevOps, and application teams.

Skills

Cloud security

IAM configuration

Network security controls

Encryption & key management

Logging & monitoring

IaC (Terraform, ARM/Bicep)

DevSecOps

Regulatory compliance

Education

Bachelor’s / Bachelor's degree in Computer Science, Information Security, or related field

Tools

Microsoft Defender for Cloud

Azure Policy

Entra ID

OCI Cloud Guard

Terraform

ARM/Bicep

Job description

malomatia in Doha, Qatar, seeks an experienced Cloud Security Engineer to join our Cybersecurity Practice. You will design, implement, and maintain security controls for clients’ cloud environments, across public, private, and hybrid setups, ensuring confidentiality, integrity, and availability of data.

You will work with cloud architects, DevOps, and application teams to embed security into the cloud lifecycle, perform risk assessments, enforce security best practices, and monitor platforms