{"id":3088874,"url":"https://alion.io/job/kaust-discovery-cloud-security-engineering-lead","title":"Cloud Security Engineering Lead","company":{"id":36398,"name":"KAUST Discovery","domain":"kaust.edu.sa","url":"https://alion.io/company/kaust-discovery","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saudi Arabia"],"countries":["SA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":95000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T14:19:49Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-28T07:25:36Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"About the Role\nKAUST is undertaking a Cybersecurity Transformation Program focused on secure cloud and hybrid environments across its multi-cloud environments. The organization emphasizes modern security architectures, Zero Trust, and sustainable operational handover, working closely with internal teams and delivery partners to modernize security operations, cloud security posture, identity, and network security.\nKaust is seeking a hands-on cloud security engineering role responsible for designing, implementing, and assuring secure cloud and hybrid environments across KAUST's multi-cloud environments. The role combines solution architecture with direct technical execution across cloud security, identity, endpoint, security operations, Zero Trust, and modern workplace security. The incumbent will translate security requirements into deployable technical controls, lead complex implementation activities, resolve cross-platform dependencies, and ensure solutions are operationally supportable and measurable. The role will work across multiple portfolio initiatives rather than a single technology program. As a start, Microsoft 365 A5 is one major project within the portfolio, alongside other initiatives such as Enterprise IAM, cloud security posture improvement, security operations integration, network security and segmentation, cyber exposure reduction, and related security modernization efforts. The engineer is expected to remain personally hands-on in design, configuration, integration, troubleshooting, testing, remediation, and knowledge transfer while providing technical direction to partners and internal teams.\nResponsibilities\nOwn cloud security architecture and engineering activities across assigned initiatives within the Cybersecurity Transformation Program, from design through implementation, stabilization, and operational handover.\nAssess Azure, Microsoft 365, hybrid, and where relevant multicloud environments to identify security gaps, technical dependencies, and opportunities for control improvement.\nDesign and implement secure cloud architectures aligned with KAUST security principles, enterprise architecture standards, operational requirements, and Zero Trust objectives.\nProvide hands-on engineering across Microsoft Entra ID, Conditional Access, Privileged Identity Management, Identity Protection, MFA and passwordless controls, Intune, Defender XDR, Defender for Cloud, Microsoft Sentinel, Microsoft Purview, and related Microsoft security capabilities.\nEngineer and improve cloud security posture management, workload protection, attack-path reduction, logging, monitoring, and security configuration across IaaS, PaaS, SaaS, endpoint, and identity environments.\nDesign and implement integrations between cloud platforms and Security Operations, including SIEM/SOAR telemetry, detection use cases, KQL analytics, incident automation, threat intelligence, and operational monitoring requirements.\nApply Zero Trust principles across identity, privileged access, endpoints, applications, network access, collaboration, and data, ensuring controls operate coherently across cloud and hybrid dependencies.\nDevelop secure connectivity and access patterns for cloud and hybrid environments, working with network security teams on segmentation, firewalling, secure remote access, private connectivity, DNS, and related controls where required.\nLead technical design decisions, configuration reviews, proof-of-concept activities, testing, troubleshooting, and remediation for assigned cloud security initiatives.\nReview and challenge designs proposed by Microsoft, cloud providers, and delivery partners; ensure technical proposals meet KAUST security, architecture, resilience, logging, and operational standards.\nLead or support migration and modernization activities from legacy security platforms to cloud-native capabilities, ensuring sequencing, coexistence, rollback, and operational continuity are addressed.\nManage technical dependencies with Enterprise IAM, Saviynt IGA, Network Security and Segmentation, Cyber Exposure Reduction, Security Operations, endpoint management, infrastructure, and application teams.\nContribute technical leadership to the Microsoft 365 A5 project, including architecture, security configuration, Defender, Entra, Intune, Purview, Security Operations integration, Copilot security controls, testing, pilot readiness, and technical handover as assigned.\nDefine technical acceptance criteria, validation evidence, security baselines, implementation standards, and production-readiness requirements for assigned initiatives.\nProactively identify architecture risks, misconfigurations, security gaps, implementation blockers, and vendor dependencies, and drive them to resolution with clear ownership and escalation.\nProduce high-quality as-built designs, configuration standards, engineering documentation, runbooks, operational procedures, and knowledge-transfer materials.\nUpskill internal technical teams through pairing, technical walkthroughs, design reviews, troubleshooting, and structured knowledge transfer so implemented capabilities can be sustainably operated by KAUST.\nQualifications\nBachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, Engineering, or a closely related discipline; substantial equivalent professional experience may be considered.\nAdvanced Microsoft certifications in Azure architecture, security, identity, Microsoft 365 security, or security operations are strongly preferred.\nRelevant cloud or cybersecurity certifications such as CISSP, CCSP, GIAC cloud security, Microsoft Security certifications, Google/AWS security certifications, or equivalent are advantageous.\nCertifications should support, not substitute for, demonstrable hands-on enterprise cloud security engineering and implementation experience.\nRequired Skills\nDeep hands-on cloud security engineering expertise across Microsoft Azure and Microsoft 365, with the ability to move comfortably between architecture, configuration, integration, troubleshooting, and operationalization.\nStrong knowledge of Microsoft security technologies including Entra ID, Conditional Access, PIM, Identity Protection, Defender XDR, Defender for Cloud, Intune, Microsoft Sentinel, and Microsoft Purview.\nStrong understanding of cloud security architecture across identity, network, endpoint, workloads, applications, data, logging, monitoring, and security operations.\nPractical experience designing and implementing Zero Trust architectures and identity-centric security controls in enterprise environments.\nStrong understanding of SIEM/SOAR, detection engineering, KQL or comparable query languages, security telemetry onboarding, incident automation, and SOC integration.\nExperience with cloud security posture management, workload hardening, attack-path analysis, secure configuration baselines, and remediation across IaaS, PaaS, and SaaS.\nAbility to design secure hybrid and, where relevant, multicloud integrations, including federation, SSO, network connectivity, logging, and security control alignment.\nStrong technical governance and engineering judgment, including the ability to challenge vendor designs and translate security requirements into practical implementation decisions.\nAbility to lead multidisciplinary technical teams and delivery partners without losing hands-on engagement in critical technical work.\nStrong written and verbal communication, including the ability to explain technical risks, architecture decisions, and delivery implications to both technical and senior stakeholders.\nEvidence-led and outcome-oriented approach, with emphasis","description_format":"text","description_chars":7676,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Higher Education"],"lifecycle":[{"event":"open","at":"2026-10-22T14:19:49Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":5,"expected_fill_days":27,"reasons":["conf:4","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/kaust-discovery-cloud-security-engineering-lead","json_url":"https://alion.io/job/kaust-discovery-cloud-security-engineering-lead.json","meta":{"generated_at":"2026-10-28T11:44:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15457,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":36398},"rest":"https://alion.io/mcp/rest/get_company?id=36398"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkaust-discovery-cloud-security-engineering-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkaust-discovery-cloud-security-engineering-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkaust-discovery-cloud-security-engineering-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kaust-discovery-cloud-security-engineering-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkaust-discovery-cloud-security-engineering-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3088874}},{"tool":"search_jobs","arguments":{"company":"kaust.edu.sa","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3088874},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}