Cloud Security Engineer

DWT Technology; Riyadh; On-site; SAR 300,000 - 480,000; Full time

Job summary

DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments in Riyadh. You will implement security controls, integrate security tools into CI/CD pipelines, and protect cloud workloads with a focus on IAM, SSO, and least-privilege access.

The role requires hands-on expertise in AWS/Azure/GCP, Terraform, Ansible, Docker, and Kubernetes security, plus familiarity with Saudi NCA/SAMA requirements.

Qualifications

• 8+ years of professional cloud security experience.
• Hands-on with AWS, Azure or GCP; cloud security design and implementation.
• Experience with DevSecOps and CI/CD security integration.
• Proficient with IaC tools such as Terraform and Ansible.
• Security scanning and image scanning in pipelines.
• Expertise in container and Kubernetes security (RBAC, policies).
• Familiarity with Saudi cybersecurity requirements (NCA/SAMA) as applicable.
• Iqama and Saudi residency required; immediate joiner preferred.

Responsibilities

• Design and implement security controls across cloud platforms and environments.
• Integrate security tooling into CI/CD pipelines for secure software delivery.
• Apply IaC security practices using Terraform and Ansible.
• Secure Docker and Kubernetes with access controls and image scanning.
• Implement IAM, SSO, and least-privilege access models.
• Monitor environments with cloud-native security tools to detect threats.
• Support compliance activities aligned with NCA/SAMA frameworks.
• Identify risks, investigate incidents and suggest remediation measures.
• Collaborate with Infra/DevOps/Sec teams to improve cloud security posture.

Skills

Cloud platforms

DevSecOps

Terraform

Ansible

Security scanning

Docker

Kubernetes

IAM/Sso

NCA/SAMA compliance

Cloud monitoring

Tools

Twistlock

Aqua Security

Snyk

AWS CloudTrail

Azure Monitor

Defender for Cloud

Job description

About the role

Cloud Security Engineer

Location Riyadh Saudi Arabia

Work Mode On-site

Experience 8 Years

Contract Duration 1 Year Extendable

Availability Immediate Joiners Only

Candidate Location Currently residing in Saudi Arabia

Iqama Requirement Valid Iqama required

Job Overview

DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments The ideal candidate will have hands-on expertise in cloud security DevSecOps infrastructure automation container and Kubernetes security identity and access management and regulatory compliance The role involves implementing cloud security controls integrating security tools into CI CD pipelines protecting cloud workloads monitoring threats and supporting compliance with relevant Saudi Arabian cybersecurity requirements

Key Responsibilities

• Design implement and maintain security controls across AWS Microsoft Azure or Google Cloud Platform GCP
• Integrate security scanning tools into CI CD pipelines to support secure software delivery
• Apply Infrastructure-as-Code security practices using tools such such as Terraform and Ansible
• Secure Docker containers and Kubernetes clusters through access controls network policies and image scanning
• Implement cloud IAM federated identity single sign-on SSO and least-privilege access models
• Monitor cloud environments using native security and monitoring tools to detect threats and support incident response
• Support compliance activities aligned with applicable Saudi cybersecurity requirements including NCA and SAMA frameworks where relevant
• Identify cloud security risks investigate incidents and recommend remediation measures
• Collaborate with infrastructure DevOps and security teams to improve cloud security posture

Required Skills and Qualifications

• Minimum 8 years of relevant professional experience
• Strong expertise in at least one major cloud platform AWS Microsoft Azure or GCP
• Experience with DevSecOps Infrastructure-as-Code and CI CD security integration
• Knowledge of Terraform Ansible and security scanning tools such as Twistlock Aqua or Snyk
• Hands-on knowledge of Docker and Kubernetes security including RBAC network policies and image scanning
• Experience with cloud IAM federated identity SSO and least-privilege access
• Familiarity with NCA and SAMA cybersecurity requirements as applicable
• Experience using cloud-native monitoring tools such as AWS CloudTrail Azure Monitor and Microsoft Defender for Cloud formerly Azure Security Center
• Understanding of cloud threat detection incident response and security remediation
• Relevant cloud security certifications such as AWS Certified Security Specialty or Microsoft Certified Azure Security Engineer Associate are advantageous
• Must currently reside in Saudi Arabia and hold a valid Iqama
• Immediate joining is mandatory
• Willingness to work onsite in Riyadh Saudi Arabia