Senior Cloud Security Engineer & Zero-Trust Lead

KAUST (King Abdullah University of Science and Technology); Thuwal; On-site; SAR 300,000 - 540,000; Full time

Job summary

KAUST is seeking a hands‑on Cloud Security Engineer to design, implement, and assure secure cloud and hybrid environments across its multi‑cloud footprint. You will lead security architecture while staying hands‑on across Azure, Entra ID, Defender, MFA, and SIEM/SOAR integrations, contributing to Zero Trust and cloud security posture.

The role supports initiatives including Microsoft 365 A5, Enterprise IAM, and cloud security improvements, with emphasis on secure connectivity, monitoring, and

Qualifications

• Bachelor’s degree in CS/Cybersecurity or related field.
• Advanced Microsoft Azure/M365 security certifications preferred.
• Relevant cloud/cybersecurity certifications (CISSP, CCSP, GIAC, Microsoft/AWS/GCP) advantageous.
• Certifications should support hands‑on enterprise cloud security engineering experience.

Responsibilities

• Own cloud security architecture and engineering activities across assigned initiatives from design through implementation, stabilization, and operational handover.
• Assess Azure, Microsoft 365, hybrid, and multicloud environments to identify security gaps and dependencies.
• Design secure cloud architectures aligned with KAUST security principles and Zero Trust objectives.
• Provide hands‑on engineering across Entra ID, CA, PIM, Identity Protection, MFA/passwordless, Intune, Defender XDR, Defender for Cloud, Sentinel, Purview.
• Engineer and improve cloud security posture management, logging, monitoring, and security configuration across IaaS, PaaS, SaaS, endpoint and identity.
• Design and implement integrations between cloud platforms and Security Operations, including SIEM/SOAR telemetry and automation.
• Apply Zero Trust principles across identity, privileged access, endpoints, apps, network access, and data.
• Lead migrations from legacy platforms to cloud‑native security capabilities with proper sequencing and continuity.

Skills

Azure security

M365 security

Zero Trust

Identity protection

MFA/passwordless

Defender XDR

SIEM/SOAR

Logging & monitoring

Hybrid cloud

Threat detection

Education

Bachelor’s degree in CS/Cybersecurity or related field

Advanced Microsoft Azure/M365 security certifications

CISSP/CCSP/GIAC or AWS/GCP security certifications

Tools

Microsoft Entra ID

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Purview

Intune

Job description

KAUST is seeking a hands‑on Cloud Security Engineer to design, implement, and assure secure cloud and hybrid environments across its multi‑cloud footprint. You will lead security architecture while staying hands‑on across Azure, Entra ID, Defender, MFA, and SIEM/SOAR integrations, contributing to Zero Trust and cloud security posture.

The role supports initiatives including Microsoft 365 A5, Enterprise IAM, and cloud security improvements, with emphasis on secure connectivity, monitoring, and