Cloud Security Engineer

Location

Riyadh, Saudi Arabia Work Mode: On-site

Experience

8+ Years Contract Duration: 1 Year (Extendable) Availability: Immediate Joiners Only Candidate

Location

Currently residing in Saudi Arabia Iqama Requirement: Valid Iqama required Job Overview DWT Technology is seeking an experienced Cloud Security Engineer to strengthen security across enterprise cloud environments. The ideal candidate will have hands-on expertise in cloud security, DevSecOps, infrastructure automation, container and Kubernetes security, identity and access management, and regulatory compliance. The role involves implementing cloud security controls, integrating security tools into CI/CD pipelines, protecting cloud workloads, monitoring threats, and supporting compliance with relevant Saudi Arabian cybersecurity requirements. Key Responsibilities Design, implement, and maintain security controls across AWS, Microsoft Azure, or Google Cloud Platform (GCP). Integrate security scanning tools into CI/CD pipelines to support secure software delivery. Apply Infrastructure-as-Code security practices using tools such as Terraform and Ansible. Secure Docker containers and Kubernetes clusters through access controls, network policies, and image scanning. Implement cloud IAM, federated identity, single sign-on (SSO), and least-privilege access models. Monitor cloud environments using native security and monitoring tools to detect threats and support incident response. Support compliance activities aligned with applicable Saudi cybersecurity requirements, including NCA and SAMA frameworks where relevant. Identify cloud security risks, investigate incidents, and recommend remediation measures. Collaborate with infrastructure, DevOps, and security teams to improve cloud security posture. Required Skills and Qualifications Minimum 8 years of relevant professional experience. Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or GCP. Experience with DevSecOps, Infrastructure-as-Code, and CI/CD security integration. Knowledge of Terraform, Ansible, and security scanning tools such as Twistlock, Aqua, or Snyk. Hands-on knowledge of Docker and Kubernetes security, including RBAC, network policies, and image scanning. Experience with cloud IAM, federated identity, SSO, and least-privilege access. Familiarity with NCA and SAMA cybersecurity requirements, as applicable. Experience using cloud-native monitoring tools such as AWS CloudTrail, Azure Monitor, and Microsoft Defender for Cloud (formerly Azure Security Center). Understanding of cloud threat detection, incident response, and security remediation. Relevant cloud security certifications, such as AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate, are advantageous. Must currently reside in Saudi Arabia and hold a valid Iqama. Immediate joining is mandatory. Willingness to work onsite in Riyadh, Saudi Arabia.