L2 Cloud Security Engineer — Multi-Cloud Defender

Malomatia; Doha; On-site; QAR 180,000 - 280,000; Full time

Job summary

Malomatia is seeking an L2 Cloud Security Engineer to support day-to-day security operations across multi-cloud estates (Azure, OCI, GCP). You will handle identity and access requests, triage security alerts, implement changes, and manage PKI and certificates per established runbooks.

The role emphasizes hands-on work with Entra ID, Defender, Intune, and certificate management, with escalation to L3 when needed. Strong incident/change discipline is required in a fast-paced environment.

Qualifications

• Bachelor's/college degree in Computer Science, IT, or related field.
• 4–6 years IT experience with 2–3 years in cloud security/operations (L2).
• Hands-on with Entra ID, RBAC, PIM, App Registrations, Conditional Access.
• Experience with ITSM processes (incidents & changes) is required.
• Certifications such as AZ-500, SC-300, SC-200, SC-900 desirable.

Responsibilities

• Identity and Access Management: PIM, app registrations, managed identities, CA/MFA troubleshooting, SSO onboarding.
• Security Automation: monitor and fix Logic Apps security automations.
• Cloud Security Operations: alert triage, incident response, Azure Policy remediation, Defender for Cloud/Servers/AKS monitoring.
• PKI and Certificate Management: certificate lifecycle, key management, inventory and renewal.
• Operations and Documentation: ITSM tickets, runbooks, on-call support.

Skills

Entra ID

Azure RBAC

Azure Policy

Defender for Cloud

Intune

Logic Apps

PIM

PowerShell

Azure CLI

KQL

Education

Bachelor's degree in Computer Science/Information Technology

Tools

Azure Key Vault

GCP Certificate Authority Service

OCI

Microsoft Entra ID

Job description

Malomatia is seeking an L2 Cloud Security Engineer to support day-to-day security operations across multi-cloud estates (Azure, OCI, GCP). You will handle identity and access requests, triage security alerts, implement changes, and manage PKI and certificates per established runbooks.

The role emphasizes hands-on work with Entra ID, Defender, Intune, and certificate management, with escalation to L3 when needed. Strong incident/change discipline is required in a fast-paced environment.