Job Overview

An opportunity is available for an experienced Senior Cloud Security Engineer to support operational security activities across a multi-cloud technology environment in Doha, Qatar.

This hands-on engineering position focuses on managing daily security operations, investigating incidents, processing access requests, implementing approved technical changes, and maintaining secure cloud infrastructure.

The successful candidate will work extensively with Microsoft Entra ID, Microsoft Defender, Intune, Azure Policy, Logic Apps, Azure Key Vault, and GCP-based certificate management services. The role requires strong practical knowledge of identity security, workload protection, endpoint management, automation, and Public Key Infrastructure (PKI).

Working within an established operations team, the engineer will handle assigned service tickets, investigate technical issues, follow approved change procedures, and ensure security tasks are completed according to operational standards.

Key Responsibilities

• Manage identity and access requests through Microsoft Entra ID, including Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and scheduled access reviews.
• Process privileged role assignments, temporary access elevations, and approved permission changes while maintaining appropriate access controls.
• Configure and maintain application registrations, service principals, managed identities, API permissions, and application credential rotation.
• Implement approved Conditional Access and Multi-Factor Authentication (MFA) changes and troubleshoot authentication-related incidents.
• Configure, maintain, and resolve Single Sign-On (SSO) and federation issues affecting business applications.
• Develop, maintain, and troubleshoot Microsoft Logic Apps security workflows, including threat-indicator blocking, agent health monitoring, and DNS change notifications.
• Apply Azure Policy assignments, monitor compliance results, and coordinate remediation of resources that do not meet established security baselines.
• Review Microsoft Defender for Cloud recommendations and secure-score findings, prioritize corrective actions, and track remediation progress.
• Investigate security alerts affecting cloud servers, containers, and Azure Kubernetes Service (AKS) workloads.
• Process Just-in-Time (JIT) access requests and implement approved workload security configuration changes.
• Administer Microsoft Defender for Endpoint and Intune, including device onboarding, application deployment, certificate distribution, and compliance troubleshooting.
• Maintain internal Certificate Authority operations, including private CAs hosted within Google Cloud Platform.
• Process certificate issuance, renewal, and revocation requests in accordance with established PKI policies Jobs in Doha.
• Manage encryption keys, secrets, rotation schedules, and approved access-policy changes through Azure Key Vault.
• Maintain accurate certificate and key inventories, monitor upcoming expiration dates, and investigate configuration-related concerns.
• Respond to assigned security incidents and service requests while following established IT service management (ITSM), change control, and operational procedures.

Required Qualifications, Skills & Experience

• Bachelor’s degree or college qualification in Computer Science, Information Technology, or a related discipline.
• 8–10 years of hands-on experience in L2/L3 cloud security operations, including practical responsibility for security incidents, access management, and technical changes.
• Advanced working knowledge of Microsoft Entra ID, including RBAC, PIM, Conditional Access, managed identities, app registrations, and SSO/federation.
• Demonstrated experience administering Microsoft Defender for Cloud, Defender for Servers, Defender for Containers, and endpoint security solutions.
• Strong understanding of Azure Policy, security configuration baselines, cloud compliance monitoring, and vulnerability remediation.
• Practical experience managing Microsoft Intune, endpoint onboarding, device compliance, and application or certificate deployment.
• Familiarity with Microsoft Logic Apps and its use in security automation, operational monitoring, and incident-response workflows.
• Proven knowledge of PKI operations, certificate lifecycle management, trust chains, encryption keys, and Azure Key Vault.
• Experience administering GCP-based private Certificate Authorities and related certificate management processes.
• Working knowledge of Oracle Cloud Infrastructure (OCI) security controls; broader multi-cloud experience across Azure, OCI, and GCP is advantageous.
• Strong understanding of cloud workload protection, privileged access controls, security alert investigation, and operational risk management.
• Experience working within structured ITSM environments, including incident management, service requests, approved change implementation, and escalation procedures.
• Ability to follow technical runbooks and standard operating procedures accurately while managing time-sensitive security activities.
• Excellent troubleshooting, analytical thinking, technical documentation, and cross-functional communication skills.
• Ability to work independently, prioritize assigned tickets, and maintain consistent security and operational standards gulf jobs.

Preferred Professional Certifications

Relevant cloud security and cybersecurity certifications are highly desirable, including:

• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Microsoft Certified: Security Operations Analyst Associate (SC-200).
• Microsoft Certified: Azure Administrator Associate (AZ-104).
• Microsoft Certified: Endpoint Administrator Associate (MD-102).
• Google Cloud Certified: Professional Cloud Security Engineer.
• Industry-recognized certifications such as CISSP, CCSP, CSA CCSK, or relevant GIAC qualifications.

How to Apply

Qualified candidates with relevant cloud security operations experience are encouraged to apply through the employer’s designated recruitment channel.

Apply Now – Senior Cloud Security Engineer | Doha, Qatar