Cloud Security Engineer
DWT Technology
8–10 years of experience
Job description
About the role
Cloud Security Engineer
Location: Riyadh, Saudi Arabia
Work Mode: On-site
Experience: 8+ Years
Contract Duration: 1 Year (Extendable)
Availability: Immediate Joiners Only
Candidate Location: Currently residing in Saudi Arabia
Iqama Requirement: Valid Iqama required
Job Overview
DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments. The ideal candidate will have hands-on expertise in cloud security, DevSecOps, infrastructure automation, container and Kubernetes security, identity and access management, and regulatory compliance.
The role involves implementing cloud security controls, integrating security tools into CI/CD pipelines, protecting cloud workloads, monitoring threats, and supporting compliance with relevant Saudi Arabian cybersecurity requirements.
Key Responsibilities
- Design, implement, and maintain security controls across AWS, Microsoft Azure, or Google Cloud Platform (GCP).
- Integrate security scanning tools into CI/CD pipelines to support secure software delivery.
- Apply Infrastructure-as-Code security practices using tools such as Terraform and Ansible.
- Secure Docker containers and Kubernetes clusters through access controls, network policies, and image scanning.
- Implement cloud IAM, federated identity, single sign-on (SSO), and least-privilege access models.
- Monitor cloud environments using native security and monitoring tools to detect threats and support incident response.
- Support compliance activities aligned with applicable Saudi cybersecurity requirements, including NCA and SAMA frameworks where relevant.
- Identify cloud security risks, investigate incidents, and recommend remediation measures.
- Collaborate with infrastructure, DevOps, and security teams to improve cloud security posture.
Required Skills and Qualifications
- Minimum 8 years of relevant professional experience.
- Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or GCP.
- Experience with DevSecOps, Infrastructure-as-Code, and CI/CD security integration.
- Knowledge of Terraform, Ansible, and security scanning tools such as Twistlock, Aqua, or Snyk.
- Hands-on knowledge of Docker and Kubernetes security, including RBAC, network policies, and image scanning.
- Experience with cloud IAM, federated identity, SSO, and least-privilege access.
- Familiarity with NCA and SAMA cybersecurity requirements, as applicable.
- Experience using cloud-native monitoring tools such as AWS CloudTrail, Azure Monitor, and Microsoft Defender for Cloud (formerly Azure Security Center).
- Understanding of cloud threat detection, incident response, and security remediation.
- Relevant cloud security certifications, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate, are advantageous.
- Must currently reside in Saudi Arabia and hold a valid Iqama.
- Immediate joining is mandatory.
- Willingness to work onsite in Riyadh, Saudi Arabia.