Senior Cloud Security Architect

Google LLC; Riyadh; On-site; SAR 420,000 - 700,000; Full time

Job summary

Google LLC is seeking a field-tested Cloud Security Architect to guide major enterprise cloud transformations. You will work with clients migrating workloads from on-prem to cloud or managing fragmented multi-cloud footprints, translating threats into actionable blueprints and new operating models.

You will mentor client leadership and align engineering with executive strategies as a trusted technical advisor.

Qualifications

• Bachelor's degree in CS, information systems, cybersecurity or equivalent.
• 5+ years of technical cybersecurity experience including cloud architecture and threat defense.
• Experience leading on-premises-to-cloud migrations or multi-cloud consolidation/remediation.
• Experience mentoring senior client leadership (CISO, CIO, VP Infra/Engineering) in security change.
• Ability to define requirements, roadmaps, and deliver architecture reviews across multi-stakeholder engagements.

Responsibilities

• Serve as technical authority guiding migrations from on-prem to cloud and rationalizing multi-cloud footprints.
• Redesign cloud security architectures; modernize SecOps/DevSecOps, IAM governance, CI/CD security, and guardrails.
• Bridge communication between practitioners and senior management.
• Educate client executives on why security transformation is necessary and how operating models adapt to cloud.
• Lead implementation of defensive controls: Zero Trust, workload identity, IaC guardrails, container/Kubernetes security, micro-segmentation.
• Translate breach investigations into long-term architectural uplift and mitigation programs.
• Produce architectural blueprints, operating models, and executive-ready roadmaps.

Skills

Cloud security

Architectural design

Technical leadership

Cross-functional communication

Education

Bachelor's degree in CS / related field

Job description

Mandiant s Security Transformation Services STS team partners directly with organizations navigating complex high-stakes security transformations We are seeking a direct field-tested Cloud Security Architect who has operated directly on the frontlines of major enterprise cloud transformations You will work side-by-side with clients who are either transitioning critical workloads from traditional on-premises environments to cloud or dealing with fragmented multi-cloud sprawl where security controls governance and visibility are inconsistent You understand the true challenges of cloud adoption Crucially because client leadership often lacks visibility into the operational realities and cultural shifts required for cloud security you will serve as a trusted technical advisor and mentor translating modern threat realities into clear architectural blueprints updated operating models and roadmaps that bridge engineering teams and executive management Part of Google Cloud Mandiant is a recognized leader in dynamic cyber defense threat intelligence and incident response services Mandiant s cybersecurity expertise has earned the trust of security professionals and company executives around the world Our unique combination of renowned frontline experience responding to some of the most complex breaches nation-state grade threat intelligence machine intelligence and the industry s best security validation ensures that Mandiant knows more about today s advanced threats than anyone.

Responsibilities

• Serve as the technical authority guiding clients through migrations from legacy on-premises datacenters to modern cloud and rationalizing and elevating sprawling fragmented multi-cloud footprints
• Redesign cloud security architectures modernize operational workflows SecOps DevSecOps identity governance CI CD pipeline security and enforce resilient security baselines aligned with Mandiant frontline threat intelligence
• Bridge the communication gap between technical practitioners and senior management
• Educate and coach client executives business leaders and engineering leads on why security transformation is necessary how their operating model must adapt to cloud
• Assist client teams in implementing pragmatic defensive controls such as Zero Trust access models workload identity federation infrastructure-as-code IaC guardrails container Kubernetes security and cloud network micro-segmentation
• Translate root causes from active breach investigations into long-term architectural uplifts and measurable mitigation programs
• Produce actionable architectural blueprints operating model frameworks and executive-ready roadmaps

Information collected and processed as part of your Google Careers profile and any job applications you choose to submit is subject to Google s Applicant and Candidate Privacy Policy

Google is proud to be an equal opportunity and affirmative action employer We are committed to building a workforce that is representative of the users we serve creating a culture of belonging and providing an equal employment opportunity regardless of race creed color religion gender sexual orientation gender identity expression national origin disability age genetic information veteran status marital status pregnancy or related condition including breastfeeding expecting or parents-to-be criminal histories consistent with legal requirements or any other basis protected by law See also Google s EEO Policy Know your rights workplace discrimination is illegal Belonging at Google and How we hire

If you have a need that requires accommodation please let us know by completing our Accommodations for Applicants form Google is a global company and in order to facilitate efficient collaboration and communication globally English proficiency is a requirement for all roles unless stated otherwise in the job posting To all recruitment agencies Google does not accept agency resumes Please do not forward resumes to our jobs alias Google employees or any other organization location Google is not responsible for any fees related to unsolicited resumes Equity is granted exclusively and discretionarily by Alphabet Inc on the basis of an agreement concluded between you and Alphabet Inc Alphabet Inc is your sole contractual partner with respect to equity grants GSU grants are not guaranteed are discretionary are subject to approval by the Alphabet Inc board of directors or its delegate the terms of the relevant Alphabet Inc stock plan and your grant agreement They have no impact on statutory payments Current or past grants do not confer an acquired right

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of technical cybersecurity experience, and experience in cloud architecture, enterprise infrastructure, and threat defense.
• Experience leading on-premises-to-cloud migrations or multi-cloud consolidation/remediation projects.
• Experience serving as a technical mentor and advisor to client leadership (CISO, CIO, VP of Infrastructure/Engineering) to deliver operational and cultural security change.
• Experience defining technical requirements, engineering roadmaps, and delivering architecture reviews across multi-stakeholder engagements.
• Must be eligible to secure and maintain High-Level Saudi Arabian National Security and Defense Clearances, equivalent to UK Developed Vetting (DV) clearance.

Preferred qualifications

• Experience designing and securing Google Cloud or other cloud platforms, including native security tools, Identity and Access Management (IAM) policies, and VPC controls.
• Expertise in IAM, identity federation, PAM, and workload identity across hybrid enterprise environments.
• Experience with DevSecOps practices, CI/CD security gating, infrastructure as code, and CSPM/CWPP tooling.
• Ability to map adversary tactics to defenses, and hold professional security certifications (e.g., Google Cloud Professional Cloud Security Engineer, CISSP).
• Ability to deconstruct technical risks into clear narratives for executives and board-level stakeholders.
• Ability to travel up to 50% across Saudi Arabia and the wider region.