Cloud Security Engineer

About the role Cloud Security Engineer Location: Riyadh, Saudi Arabia Work Mode: On-site Experience: 8+ Years Contract Duration: 1 Year (Extendable) Availability: Immediate Joiners Only Candidate Location: Currently residing in Saudi Arabia Iqama Requirement: Valid Iqama required Job Overview DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments. The ideal candidate will have hands-on expertise in cloud security, DevSecOps, infrastructure automation, container and Kubernetes security, identity and access management, and regulatory compliance. The role involves implementing cloud security controls, integrating security tools into CI/CD pipelines, protecting cloud workloads, monitoring threats, and supporting compliance with relevant Saudi Arabian cybersecurity requirements. Key Responsibilities • Design, implement, and maintain security controls across AWS, Microsoft Azure, or Google Cloud Platform (GCP). • Integrate security scanning tools into CI/CD pipelines to support secure software delivery. • Apply Infrastructure-as-Code security practices using tools such as Terraform and Ansible. • Secure Docker containers and Kubernetes clusters through access controls, network policies, and image scanning. • Implement cloud IAM, federated identity, single sign-on (SSO), and least-privilege access models. • Monitor cloud environments using native security and monitoring tools to detect threats and support incident response. • Support compliance activities aligned with applicable Saudi cybersecurity requirements, including NCA and SAMA frameworks where relevant. • Identify cloud security risks, investigate incidents, and recommend remediation measures. • Collaborate with infrastructure, DevOps, and security teams to improve cloud security posture. Required Skills and Qualifications • Minimum 8 years of relevant professional experience. • Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or GCP. • Experience with DevSecOps, Infrastructure-as-Code, and CI/CD security integration. • Knowledge of Terraform, Ansible, and security scanning tools such as Twistlock, Aqua, or Snyk. • Hands-on knowledge of Docker and Kubernetes security, including RBAC, network policies, and image scanning. • Experience with cloud IAM, federated identity, SSO, and least-privilege access. • Familiarity with NCA and SAMA cybersecurity requirements, as applicable. • Experience using cloud-native monitoring tools such as AWS CloudTrail, Azure Monitor, and Microsoft Defender for Cloud (formerly Azure Security Center). • Understanding of cloud threat detection, incident response, and security remediation. • Relevant cloud security certifications, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate, are advantageous. • Must currently reside in Saudi Arabia and hold a valid Iqama. • Immediate joining is mandatory. • Willingness to work onsite in Riyadh, Saudi Arabia.