Cloud Security Specialist

TAQAT; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

TAQAT is seeking a Cloud Security Specialist to protect the organization’s multi-cloud infrastructure, applications, data, and identities. You will design secure architectures, enforce IAM, and lead threat modeling across AWS and Azure.

Responsibilities include continuous vulnerability management, automated IaC security, and integrating cloud-native monitoring tools. Strong communication with DevOps and platform teams is required.

Qualifications

• Bachelor's degree required; 4–8 years in cloud security.
• Certifications: AWS Certified Security Specialty, CKs, Microsoft SC-300/AZ-500, GIAC cloud security.

Responsibilities

• Serve as SME in a cloud security domain (identity, containers, network security, data protection).
• Design, implement, and maintain cloud-native security architectures across AWS, Azure.
• Define and enforce IAM strategies, including least-privilege roles and automated governance workflows.
• Lead cloud security assessments and threat modeling for new platforms and major releases.
• Build and operate cloud detection and response capabilities using cloud-native tools (AWS Security Hub, Azure Defender, etc ...).
• Develop and maintain IaC security policies and automated scanning for Terraform, CloudFormation, and ARM/Bicep.
• Design and enforce Kubernetes security controls (RBAC, network policies, runtime protection).
• Perform continuous vulnerability management for cloud workloads and managed services.
• Translate technical risk into business impact for leadership and engineering teams.

Skills

Cloud security

IAM design

Kubernetes security

Cloud networking

Risk communication

Education

Bachelor's degree in Computer Science, Information Security, or equivalent

Tools

Terraform

CloudFormation

ARM/Bicep

Wiz

Orca

Prisma Cloud

AWS Security Hub

Azure Defender

Job description

Overview The Cloud Security Specialist is responsible for protecting the organization's cloud infrastructure, applications, data, and identities. The role focuses on identifying and mitigating security risks, managing access controls, monitoring and responding to cyber threats, ensuring secure cloud configurations, and maintaining compliance with organizational policies and regulatory requirements across multi-cloud environments.

Key Responsibilities

Core Duties

• Serve as the subject matter expert in a cloud security domain (identity, containers, network security, data protection).
• Design, implement, and maintain cloud‑native security architectures across AWS, Azure.
• Define and enforce IAM strategies, including least‑privilege roles and automated governance workflows.
• Lead cloud security assessments and threat modeling for new platforms and major releases.
• Build and operate cloud detection and response capabilities using cloud‑native tools (AWS Security Hub, Azure Defender, etc ...).
• Develop and maintain IaC security policies and automated scanning for Terraform, Cloud Formation, and ARM/Bicep.
• Design and enforce Kubernetes security controls (RBAC, network policies, runtime protection).
• Perform continuous vulnerability management for cloud workloads and managed services.
• Translate technical risk into business impact for leadership and engineering teams.

Required Skills

Technical Skills

• Deep expertise in AWS and Azure, security services.
• Strong IAM design and governance skills.
• Proficiency with IaC tools (Terraform, Cloud Formation, ARM/Bicep).
• Experience with Kubernetes security (EKS/AKS/GKE).
• Familiarity with CSPM tools (Wiz, Orca, Prisma Cloud).
• Knowledge of SIEM/EDR and cloud‑native monitoring tools.
• Understanding cloud networking, encryption, secrets management, and container security.

Soft Skills

• Ability to collaborate with Dev Ops, SRE, platform engineering, and application teams.
• Strong communication skills to explain risk and influence stakeholders.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 4–8 years of experience, including 3+ years in a cloud security specialty.
• Relevant certifications:AWS Certified Security Specialty Certified Kubernetes Security Specialist (CKS) Microsoft SC‑300 / AZ‑500GIAC cloud security certifications