Senior Consultant - Cloud Security Architect

About the role

KPMG Middle East is hiring a Senior Consultant Cloud Security Architect in Dubai. The consultant helps deliver high-quality client engagements by advising on secure cloud adoption, lift-and-shift migrations and landing zone security design, and supporting security architecture across Azure, Microsoft 365, AWS and OCI environments. Previous Big4 experience is a must.

Key responsibilities

• Advise clients on secure cloud adoption, lift-and-shift migration and landing zone security design
• Design and implement security controls across Azure landing zones (identity, networking, logging, governance, encryption, workload protection, monitoring)
• Support security architecture across Azure, Microsoft 365, AWS and OCI, and help clients navigate cybersecurity regulations and compliance requirements
• Assess cloud environments against security baselines such as CIS, NIST, ISO, CAF and cloud provider best practices
• Help clients optimize security controls and support security transformation programs
• Deliver automation of security controls, security posture reporting and risk dashboards where relevant
• Support small and medium engagements independently and join larger transformation programs
• Support presales, proposal development and business development, and build trusted relationships with clients at technical and senior stakeholder level

Required profile

• Proven experience in cloud security architecture, combining hands-on technical work with client advisory skills
• Previous Big4 experience is a must
• Ability to analyse complex problems, communicate with technical teams and senior stakeholders, and explain cybersecurity topics as business risk and remediation advice
• Ability to work at sustained high intensity while maintaining quality and professionalism

Required skills

• Strong hands-on experience with Microsoft Azure and Microsoft 365; Azure landing zone design and implementation
• Identity and access management (Microsoft Entra ID, Conditional Access, PIM, workload identities, identity governance)
• Cloud security assessments, configuration reviews, privacy and regulatory risk assessments, and control framework mapping
• Experience in one or more cloud providers (Azure, AWS, OCI, GCP)
• Certifications are highly valued: SC-100, SC-500, SC-300, SC-401, AZ-104/AZ-305, AWS Security Specialty, CISSP/CISM/CCSP, SABSA or TOGAF