Hands-on Cloud Security Lead - Zero Trust & Hybrid

KAUST (King Abdullah University of Science and Technology); Thuwal; On-site; SAR 280,000 - 520,000; Full time

Job summary

KAUST is seeking a hands-on cloud security engineer to design, implement, and assure secure cloud and hybrid environments across its multi-cloud landscape. You will translate security requirements into deployable controls and stay hands-on with design, configuration, integration, testing, and knowledge transfer.

The role covers Microsoft 365 A5, Enterprise IAM, cloud posture, SOC integration, and network security, with leadership in architectural decisions and hands-on delivery across Azure,

Qualifications

• Bachelor's degree in CS, Cybersecurity, Information Security, IT, Engineering, or related field.
• Advanced Microsoft certifications in Azure security, identity, M365 security or security operations preferred.
• Relevant cloud security certifications such as CISSP, CCSP, GIAC cloud security, Microsoft security certifications advantageous.
• Certifications should support hands-on enterprise cloud security engineering experience.

Responsibilities

• Own cloud security architecture and engineering activities end-to-end from design to handover.
• Assess Azure, Microsoft 365, hybrid and multicloud environments to identify gaps and dependencies.
• Design secure cloud architectures aligned with Zero Trust and KAUST standards.
• Provide hands-on engineering across Entra ID, CA, PIM, Identity Protection, MFA, Defender, Sentinel, Purview.
• Lead migrations and modernization from legacy platforms to cloud-native security.
• Produce engineering documentation, runbooks, and knowledge-transfer materials.

Skills

Azure security

Identity security

Zero Trust

SIEM/SOAR

KQL analytics

Defender XDR

Microsoft Entra ID

Incident response

Education

Bachelor's degree in CS/Cybersecurity/IT/Engineering

Tools

Microsoft Sentinel

Microsoft Defender for Cloud

Intune

PIM

Job description

KAUST is seeking a hands-on cloud security engineer to design, implement, and assure secure cloud and hybrid environments across its multi-cloud landscape. You will translate security requirements into deployable controls and stay hands-on with design, configuration, integration, testing, and knowledge transfer.

The role covers Microsoft 365 A5, Enterprise IAM, cloud posture, SOC integration, and network security, with leadership in architectural decisions and hands-on delivery across Azure,