Senior Cloud Security Architect, Mandiant, Cloud and Infrastructure

About the job

Mandiant’s Security Transformation Services (STS) team partners directly with organizations navigating complex, high-stakes security transformations.

We are seeking a direct, field-tested Cloud Security Architect who has operated directly on the frontlines of major enterprise cloud transformations. You will work side-by-side with clients who are either transitioning critical workloads from traditional on-premises environments to cloud, or dealing with fragmented, multi-cloud sprawl where security controls, governance, and visibility are inconsistent.

You understand the true challenges of cloud adoption. Crucially, because client leadership often lacks visibility into the operational realities and cultural shifts required for cloud security, you will serve as a trusted technical advisor and mentor-translating modern threat realities into clear architectural blueprints, updated operating models, and roadmaps that bridge engineering teams and executive management.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Serve as the technical authority guiding clients through migrations from legacy on-premises datacenters to modern cloud, and rationalizing and elevating sprawling, fragmented multi-cloud footprints.
• Redesign cloud security architectures, modernize operational workflows (SecOps, DevSecOps, identity governance, CI/CD pipeline security), and enforce resilient security baselines aligned with Mandiant frontline threat intelligence.
• Bridge the communication gap between technical practitioners and senior management. Educate and coach client executives, business leaders, and engineering leads on why security transformation is necessary, how their operating model must adapt to cloud.
• Assist client teams in implementing pragmatic, defensive controls-such as Zero Trust access models, workload identity federation, infrastructure-as-code (IaC) guardrails, container/Kubernetes security, and cloud network micro-segmentation.
• Translate root causes from active breach investigations into long-term architectural uplifts and measurable mitigation programs. Produce actionable, architectural blueprints, operating model frameworks, and executive-ready roadmaps.

Qualifications

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of technical cybersecurity experience, and experience in cloud architecture, enterprise infrastructure, and threat defense.
• Experience leading on-premises-to-cloud migrations or multi-cloud consolidation/remediation projects.
• Experience serving as a technical mentor and advisor to client leadership (CISO, CIO, VP of Infrastructure/Engineering) to deliver operational and cultural security change.
• Experience defining technical requirements, engineering roadmaps, and delivering architecture reviews across multi-stakeholder engagements.
• Must be eligible to secure and maintain High-Level Saudi Arabian National Security and Defense Clearances, equivalent to UK Developed Vetting (DV) clearance.

Preferred qualifications:

• Experience designing and securing Google Cloud or other cloud platforms, including native security tools, Identity and Access Management (IAM) policies, and VPC controls.
• Expertise in IAM, identity federation, PAM, and workload identity across hybrid enterprise environments.
• Experience with DevSecOps practices, CI/CD security gating, infrastructure as code, and CSPM/CWPP tooling.
• Ability to map adversary tactics to defenses, and hold professional security certifications (e.g., Google Cloud Professional Cloud Security Engineer, CISSP).
• Ability to deconstruct technical risks into clear narratives for executives and board-level stakeholders.
• Ability to travel up to 50% across Saudi Arabia and the wider region.