Senior Consultant - Cloud Security Architect
On-siteDubai, Dubai, United Arab Emirates
Job Summary
Deliver high-quality client engagements by understanding business challenges, regulatory requirements, and threat landscapes to advise on secure cloud adoption, lift-and-shift migrations, and landing zone security design. Design and implement security controls across Azure, Microsoft 365, AWS, and OCI environments, including identity, networking, logging, governance, encryption, and workload protection. Assess existing cloud environments against security baselines such as CIS, NIST, ISO, and CAF while helping clients navigate cybersecurity regulations and optimize digital security controls. Support security architecture for broader transformation programs, deliver automation for security posture reporting, and build trusted relationships with technical and senior stakeholders. Act as a trusted advisor for quality and risk management, contributing to the development of KPMG's cloud security services and professional network.
Required Qualifications
- Proven experience in cloud security architecture
- Strong hands-on experience in Microsoft Azure
- Strong hands-on experience in Microsoft 365
- Practical experience with secure cloud migration
- Practical experience with lift-and-shift scenarios
- Practical experience with Azure landing zone design
- Practical experience with Azure landing zone implementation
- Strong understanding of Azure landing zone security
- Experience with management groups
- Experience with subscriptions
- Experience with RBAC
- Experience with Azure Policy
- Experience with Defender for Cloud
- Experience with logging
- Experience with network security
- Experience with private endpoints
- Experience with Key Vault
- Experience with backup
- Experience with workload protection
- Experience assessing security controls across multiple layers of the IT architecture stack
- Strong knowledge of Identity and Access Management
- Experience with Microsoft Entra ID
- Experience with Conditional Access
- Experience with Privileged Identity Management
- Experience with workload identities
- Experience with identity governance
- Experience with cloud security assessments
- Experience with security configuration reviews
- Experience with privacy and regulatory risk assessments
- Experience with control framework mapping
- Experience delivering cybersecurity services in a commercial or consulting environment
- Experience in one or more cloud service provider environments: Microsoft Azure, AWS, OCI, or GCP
- Ability to analyze complex problems
- Ability to identify core issues
- Ability to recommend practical and proportionate solutions
- Ability to communicate clearly with both technical teams and senior stakeholders
- Ability to translate complex cybersecurity topics into clear business risk, impact, and remediation advice
- Ability to work at sustained levels of high intensity while maintaining quality, structure, and professionalism
- Previous Big4 experience
Desired Qualifications
- Experience with DevSecOps concepts
- Experience with infrastructure-as-code
- Experience with policy-as-code
- Experience with security automation
- Experience with continuous control monitoring
- A combination of cloud, security, and architecture certifications
- Microsoft Certified: Cybersecurity Architect Expert – SC-100
- Microsoft Certified: Cloud and AI Security Engineer Associate – SC-500
- Microsoft Certified: Identity and Access Administrator Associate – SC-300
- Microsoft Certified: Information Security Administrator Associate – SC-401
- Microsoft Azure architecture or administrator certifications such as AZ-104 or AZ-305
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Professional
- Google Cloud Professional Cloud Security Engineer
- CISSP, CISM, CCSP, or comparable cybersecurity experience
- SABSA, TOGAF, or comparable architecture experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.