Senior Cloud Security Architect, Mandiant, Cloud and Infrastructure

Google LLC; Saudi Arabia; Hybrid; SAR 350,000 - 550,000; Full time

Job summary

Google LLC's Mandiant unit seeks a direct, field-tested Cloud Security Architect to lead enterprise cloud transformations. You will partner with clients migrating workloads to cloud or tackling fragmented multi-cloud security gaps, delivering architectural blueprints, governance updates, and roadmaps aligned with threat intelligence.

You will mentor client leadership, bridge engineering and executive teams, and drive Zero Trust, IAM, and CSPM-driven controls across complex environments.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or equivalent.
• 5 years of technical cybersecurity experience incl cloud architecture and threat defense.
• Experience leading on-premises-to-cloud migrations or multi-cloud projects.
• Eligible to secure High-Level Saudi security clearances similar to DV.
• Experience defining requirements, roadmaps, and architecture reviews across multi-stakeholder engagements.

Responsibilities

• Serve as technical authority guiding migrations from on-premises to cloud.
• Redesign cloud security architectures and modernize SecOps/DevSecOps workflows.
• Educate client leadership and engineering teams on security transformation and operating models.
• Implement defensive controls: Zero Trust, workload identity, IaC guardrails, and container security.
• Translate breach findings into long-term architectural uplifts and roadmaps.

Skills

Cloud security

Threat defense

On-prem to cloud migrations

Leadership & mentoring

Architecture reviews

Executive coaching

Education

Bachelor's degree in Computer Science/Information Systems/Cybersecurity or equivalent

Tools

Google Cloud

IAM

PAM

CSPM/CWPP tooling

DevSecOps

Infrastructure as Code (IaC)

Job description

Applicants to this role must have work authorization in Saudi Arabia as this role is not eligible for work visa sponsorship.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

In-office locations: Riyadh Saudi Arabia.

Remote location(s): Saudi Arabia.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.


• 5 years of technical cybersecurity experience, and experience in cloud architecture, enterprise infrastructure, and threat defense.


• Experience leading on-premises-to-cloud migrations or multi-cloud consolidation/remediation projects.


• Experience serving as a technical mentor and advisor to client leadership (CISO, CIO, VP of Infrastructure/Engineering) to deliver operational and cultural security change.


• Experience defining technical requirements, engineering roadmaps, and delivering architecture reviews across multi-stakeholder engagements.


• Must be eligible to secure and maintain High-Level Saudi Arabian National Security and Defense Clearances, equivalent to UK Developed Vetting (DV) clearance.

Preferred qualifications:

• Experience designing and securing Google Cloud or other cloud platforms, including native security tools, Identity and Access Management (IAM) policies, and VPC controls.


• Expertise in IAM, identity federation, PAM, and workload identity across hybrid enterprise environments.


• Experience with DevSecOps practices, CI/CD security gating, infrastructure as code, and CSPM/CWPP tooling.


• Ability to map adversary tactics to defenses, and hold professional security certifications (e.g., Google Cloud Professional Cloud Security Engineer, CISSP).


• Ability to deconstruct technical risks into clear narratives for executives and board-level stakeholders.


• Ability to travel up to 50% across Saudi Arabia and the wider region.

About The Job

Mandiant’s Security Transformation Services (STS) team partners directly with organizations navigating complex, high-stakes security transformations.

We are seeking a direct, field-tested Cloud Security Architect who has operated directly on the frontlines of major enterprise cloud transformations. You will work side-by-side with clients who are either transitioning critical workloads from traditional on-premises environments to cloud, or dealing with fragmented, multi-cloud sprawl where security controls, governance, and visibility are inconsistent.

You understand the true challenges of cloud adoption. Crucially, because client leadership often lacks visibility into the operational realities and cultural shifts required for cloud security, you will serve as a trusted technical advisor and mentor—translating modern threat realities into clear architectural blueprints, updated operating models, and roadmaps that bridge engineering teams and executive management.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Serve as the technical authority guiding clients through migrations from legacy on-premises datacenters to modern cloud, and rationalizing and elevating sprawling, fragmented multi-cloud footprints.


• Redesign cloud security architectures, modernize operational workflows (SecOps, DevSecOps, identity governance, CI/CD pipeline security), and enforce resilient security baselines aligned with Mandiant frontline threat intelligence.


• Bridge the communication gap between technical practitioners and senior management. Educate and coach client executives, business leaders, and engineering leads on why security transformation is necessary, how their operating model must adapt to cloud.


• Assist client teams in implementing pragmatic, defensive controls—such as Zero Trust access models, workload identity federation, infrastructure-as-code (IaC) guardrails, container/Kubernetes security, and cloud network micro-segmentation.


• Translate root causes from active breach investigations into long-term architectural uplifts and measurable mitigation programs. Produce actionable, architectural blueprints, operating model frameworks, and executive-ready roadmaps.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.