Cloud Security Engineering Lead

Cloud Security Engineering Lead Job Details | King Abdullah University of Science & Technology Skip to main content Home Professional Life at KAUST Living at KAUST Career Areas Academic and Research Jobs Innovation and Entrepreneurship Jobs Administration and Support Services Jobs Engineering and Facilities Management Jobs The KAUST School Jobs Elevate Program Join our Talent Community Search by Keyword Home Professional Life at KAUST Living at KAUST Career Areas Academic and Research Jobs Innovation and Entrepreneurship Jobs Administration and Support Services Jobs Engineering and Facilities Management Jobs The KAUST School Jobs Elevate Program Join our Talent Community View Profile Search by Keyword Select how often (in days) to receive an alert: Create Alert × Select how often (in days) to receive an alert: Cloud Security Engineering Lead Apply now » Date: Oct 22, 2026 Location: Saudi Arabia Company: King Abdullah University of Science & Technology About the Role KAUST is undertaking a Cybersecurity Transformation Program focused on secure cloud and hybrid environments across its multi-cloud environments. The organization emphasizes modern security architectures, Zero Trust, and sustainable operational handover, working closely with internal teams and delivery partners to modernize security operations, cloud security posture, identity, and network security. Kaust is seeking a hands-on cloud security engineering role responsible for designing, implementing, and assuring secure cloud and hybrid environments across KAUST's multi-cloud environments. The role combines solution architecture with direct technical execution across cloud security, identity, endpoint, security operations, Zero Trust, and modern workplace security. The incumbent will translate security requirements into deployable technical controls, lead complex implementation activities, resolve cross-platform dependencies, and ensure solutions are operationally supportable and measurable. The role will work across multiple portfolio initiatives rather than a single technology program. As a start, Microsoft 365 A5 is one major project within the portfolio, alongside other initiatives such as Enterprise IAM, cloud security posture improvement, security operations integration, network security and segmentation, cyber exposure reduction, and related security modernization efforts. The engineer is expected to remain personally hands-on in design, configuration, integration, troubleshooting, testing, remediation, and knowledge transfer while providing technical direction to partners and internal teams. Responsibilities Own cloud security architecture and engineering activities across assigned initiatives within the Cybersecurity Transformation Program, from design through implementation, stabilization, and operational handover. Assess Azure, Microsoft 365, hybrid, and where relevant multicloud environments to identify security gaps, technical dependencies, and opportunities for control improvement. Design and implement secure cloud architectures aligned with KAUST security principles, enterprise architecture standards, operational requirements, and Zero Trust objectives. Provide hands-on engineering across Microsoft Entra ID, Conditional Access, Privileged Identity Management, Identity Protection, MFA and passwordless controls, Intune, Defender XDR, Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and related Microsoft security capabilities. Engineer and improve cloud security posture management, workload protection, attack-path reduction, logging, monitoring, and security configuration across IaaS, PaaS, SaaS, endpoint, and identity environments. Design and implement integrations between cloud platforms and Security Operations, including SIEM/SOAR telemetry, detection use cases, KQL analytics, incident automation, threat intelligence, and operational monitoring requirements. Apply Zero Trust principles across identity, privileged access, endpoints, applications, network access, collaboration, and data, ensuring controls operate coherently across cloud and hybrid dependencies. Develop secure connectivity and access patterns for cloud and hybrid environments, working with network security teams on segmentation, firewalling, secure remote access, private connectivity, DNS, and related controls where required. Lead technical design decisions, configuration reviews, proof-of-concept activities, testing, troubleshooting, and remediation for assigned cloud security initiatives. Review and challenge designs proposed by Microsoft, cloud providers, and delivery partners; ensure technical proposals meet KAUST security, architecture, resilience, logging, and operational standards. Lead or support migration and modernization activities from legacy security platforms to cloud-native capabilities, ensuring sequencing, coexistence, rollback, and operational continuity are addressed. Manage technical dependencies with Enterprise IAM, Saviynt IGA, Network Se

Own cloud security architecture and engineering activities across assigned initiatives within the Cybersecurity Transformation Program, from design through implementation, stabilization, and operational handover. Assess Azure, Microsoft 365, hybrid, and where relevant multicloud environments to identify security gaps, technical dependencies, and opportunities for control improvement. Design and implement secure cloud architectures aligned with KAUST security principles, enterprise architecture standards, operational requirements, and Zero Trust objectives. Provide hands-on engineering across Microsoft Entra ID, Conditional Access, Privileged Identity Management, Identity Protection, MFA and passwordless controls, Intune, Defender XDR, Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and related Microsoft security capabilities. Engineer and improve cloud security posture management, workload protection, attack-path reduction, logging, monitoring, and security configuration across IaaS, PaaS, SaaS, endpoint, and identity environments. Design and implement integrations between cloud platforms and Security Operations, including SIEM/SOAR telemetry, detection use cases, KQL analytics, incident automation, threat intelligence, and operational monitoring requirements. Apply Zero Trust principles across identity, privileged access, endpoints, applications, network access, collaboration, and data, ensuring controls operate coherently across cloud and hybrid dependencies. Develop secure connectivity and access patterns for cloud and hybrid environments, working with network security teams on segmentation, firewalling, secure remote access, private connectivity, DNS, and related controls where required. Lead technical design decisions, configuration reviews, proof-of-concept activities, testing, troubleshooting, and remediation for assigned cloud security initiatives. Review and challenge designs proposed by Microsoft, cloud providers, and delivery partners; ensure technical proposals meet KAUST security, architecture, resilience, logging, and operational standards. Lead or support migration and modernization activities from legacy security platforms to cloud-native capabilities, ensuring sequencing, coexistence, rollback, and operational continuity are addressed. Manage technical dependencies with Enterprise IAM, Saviynt IGA, Network Se