Cloud Security Consultant

malomatia; Doha; On-site; QAR 240,000 - 360,000; Full time

Job summary

malomatia in Doha is seeking an experienced Microsoft Security Consultant to design, implement, and operate security controls across the Microsoft security stack for cloud and hybrid environments.

You will deploy Defender suites, Purview, assess and harden Azure/Microsoft 365 environments, and ensure compliance with Qatar regulatory requirements, using benchmarks like CIS/NIST and the Microsoft Cloud Security Benchmark.

Qualifications

• Bachelor’s / college degree in Computer Science, Information Technology, or a related field.
• At least 3 years hands‑on experience implementing and configuring Microsoft Azure and Microsoft 365 security solutions, or a closely related role, with demonstrable experience deploying Microsoft Defender and Microsoft Purview.
• Relevant professional certifications are highly desirable, including SC-200, SC-300, SC-400, AZ-500, SC-100, AZ-104/AZ-305, or CISSP/CCSP/GIAC.

Responsibilities

• Microsoft Security Architecture: assess Microsoft 365, Azure, and hybrid environments to design controls using native Microsoft capabilities.
• Governance: define and maintain cloud security governance frameworks with Azure Policy and Purview controls.
• Monitoring/Threat Detection: operate Defender and Sentinel to detect misconfigurations, vulnerabilities, and incidents.
• Identity and Access Management: implement IAM with Entra ID, RBAC, least privilege, MFA, and Privileged Identity Management.
• Cloud Security Configuration: enforce security via Defender for Cloud, NSGs, encryption, Key Vault, and logging.

Skills

Microsoft Defender

Microsoft Sentinel

Purview

Entra ID

Azure

Defender for Cloud

Conditional Access

Identity and Access Management

Zero Trust

NIST/CIS Benchmarks

Education

Bachelor's degree in Computer Science or IT

Tools

Azure Policy

Azure Key Vault

Microsoft Defender for Cloud

Microsoft Entra ID

Job description

We are seeking an experienced Microsoft Security Consultant to join our Cybersecurity Practice. In this role, you will work closely with our cloud, infrastructure, and security teams to design, implement, and operate security controls across the Microsoft security stack to protect our clients' cloud and hybrid environments.

Your responsibilities will include deploying and configuring Microsoft Defender (including Defender for Endpoint, Defender for Cloud, Defender for Office 365, and Defender for Identity) and Microsoft Purview for data governance, data loss prevention, information protection, insider risk management, and compliance. You will assess existing Microsoft 365 and Azure environments, identify security gaps, harden configurations against established baselines, and continuously monitor these platforms to ensure the confidentiality, integrity, and availability of systems and data. You will support the secure adoption of Microsoft cloud services across Microsoft 365, Azure, and hybrid environments, configuring policies and controls that align with organizational requirements, industry standards (such as the Microsoft Cloud Security Benchmark, CIS, and NIST), and Qatari regulatory requirements. This includes implementing conditional access, identity and access management through Microsoft Entra ID, threat detection and response workflows, and compliance and data protection controls through Purview.

Responsibilities

• Microsoft Security Architecture and Assessment: Assess Microsoft 365, Azure, and hybrid environments to identify security risks and design appropriate controls using native Microsoft capabilities. Conduct security reviews of Azure subscriptions, workloads, and configurations across compute, storage, networking, identity, and platform services, using Microsoft Defender for Cloud secure score and recommendations as a baseline. Provide detailed assessment reports with clear, actionable remediation recommendations aligned with the Microsoft Cloud Security Benchmark, CIS, and NIST.
• Microsoft Security Governance: Define, implement, and maintain cloud security governance frameworks, including security policies, standards, baselines, and control frameworks built on Azure Policy, Microsoft Defender for Cloud regulatory compliance, and Purview governance capabilities. Establish clear roles and responsibilities through RACI models and support the development of operating procedures to ensure consistent, repeatable, and auditable security practices across Microsoft environments.
• Security Monitoring and Threat Detection: Implement and operate Microsoft Defender and Microsoft Sentinel to detect misconfigurations, vulnerabilities, and suspicious activities. Analyze alerts and incidents across the Defender XDR portal and Sentinel, build detection rules and analytics, investigate potential incidents, and support timely response and remediation to maintain the confidentiality, integrity, and availability of cloud environments.
• Identity and Access Management: Review and support the secure implementation of identity and access controls through Microsoft Entra ID, including role-based access control, least privilege, conditional access, multifactor authentication, and Privileged Identity Management across Microsoft cloud platforms and services.
• Cloud Security Configuration: Implement native Azure security controls including Microsoft Defender for Cloud, network security groups, encryption, key management (Azure Key Vault), and logging and monitoring to enforce a strong security posture.

Qualifications

• Education: Bachelor’s / college degree in Computer Science, Information Technology, or a related field.
• Experience: At least 3 years of hands‑on experience implementing and configuring Microsoft Azure and Microsoft 365 security solutions, or a closely related role, with demonstrable experience deploying Microsoft Defender and Microsoft Purview.
• Certifications: Relevant professional certifications are highly desirable. These may include, but are not limited to:
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-400)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure Solutions Architect Expert (AZ-305)
• Vendor‑agnostic security certifications (CISSP, CCSP, CSA CCSK, GIAC, etc.)
• Technical Skills: Strong hands‑on experience deploying and configuring the Microsoft security stack, including Microsoft Defender (Defender for Cloud, Endpoint, Office 365, and Identity), Microsoft Sentinel, Microsoft Purview, and Microsoft Entra ID. Experience with core Azure services across compute, storage, networking, and identity, along with native security tooling such as Key Vault, Network Security Groups, and Azure Policy.
• Knowledge: Solid understanding of cloud architecture principles and the Microsoft Cloud Adoption Framework and Azure Well‑Architected Framework. Working knowledge of security concepts including Zero Trust, least privilege, network segmentation, and encryption, with practical understanding of how Microsoft technologies implement them (Conditional Access, Privileged Identity Management, Defender for Cloud secure score). Familiarity with the Microsoft Cloud Security Benchmark, CIS Benchmarks, NIST, and ISO 27001. Knowledge of Qatar National Information Assurance (NIA) is a plus.