Senior Cloud Security Engineer — Multi-Cloud IAM & Automation

Malomatia; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Malomatia is seeking a hands-on L2/L3 Cloud Security Engineer to manage day-to-day security operations across a multi-cloud estate (Azure, OCI, GCP) in Doha, Qatar. You will handle IAM, incident response, changes, and routine tasks using Entra ID, Defender, Intune, and Key Vault.

You will work within the operations team, process tickets, implement approved changes, and help strengthen security posture across cloud workloads and PKI management.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 8–10 years hands-on cloud security operations (L2/L3) with Entra ID RBAC, PIM, App Registrations, Managed Identities and Conditional Access.
• Incidents and change management experience; multi‑cloud experience is a plus (Azure, OCI, GCP).
• Certifications in cloud security are desirable (e.g., SC‑300, AZ‑500, SC‑200, CISSP/CCSP/GIAC).

Responsibilities

• Identity and Access Management: Entra ID, PIM, app registrations, managed identities, CA/MFA, SSO/federation.
• Security automation: Logic Apps security automations, IOC blocking, health checks, alerting.
• Cloud security operations: Defender for Cloud, Defender for Servers/Containers, Azure Policy enforcement.
• PKI and certificate management: PKI operations in GCP and private CAs, Key Vault, certificate lifecycle.

Skills

Entra ID RBAC

PIM

Defender for Cloud

Intune

Logic Apps

Azure Key Vault

Education

Bachelor's degree in CS/IT

Tools

Azure

GCP

OCI

Microsoft Defender

Intune

Job description

Malomatia is seeking a hands-on L2/L3 Cloud Security Engineer to manage day-to-day security operations across a multi-cloud estate (Azure, OCI, GCP) in Doha, Qatar. You will handle IAM, incident response, changes, and routine tasks using Entra ID, Defender, Intune, and Key Vault.

You will work within the operations team, process tickets, implement approved changes, and help strengthen security posture across cloud workloads and PKI management.