arrow_back Back to Dashboard search Browse Jobs
KPMG Middle East logo

KPMG Middle East

Senior Consultant - Cloud Security Architect

🗓️ Posted 2026-08-19 Dubai, Dubai, United Arab Emirates Full-time Hybrid ICT

Company shared salary

NA

Market rate

AED 25,000–AED 45,000/mo (AED 300,000–AED 540,000/yr)

Based on similar roles (title + domain + location).

Responsibilities

  • ● Understanding clients' business challenges, cloud ambitions, regulatory requirements, and threat landscape
  • ● Advising clients on secure cloud adoption, lift-and-shift migration, and landing zone security design
  • ● Designing and implementing security controls across Azure landing zones, including identity, networking, logging, governance, encryption, workload protection, and monitoring
  • ● Supporting security architecture across Azure, Microsoft 365, AWS, and OCI environment
  • ● Helping clients navigate cybersecurity regulations, security frameworks, and cloud compliance requirements
  • ● Advising on cloud security governance, operating models, control frameworks, and risk management
  • ● Assessing existing cloud environments against security baselines such as CIS, NIST, ISO, CAF, and cloud provider best practices
  • ● Helping clients optimize their digital and technical security controls across multiple layers of the cloud architecture stack
  • ● Using security architecture to define and support broader security transformation programs
  • ● Delivering automation of security controls, security posture reporting, and risk dashboards where relevant
  • ● Supporting small and medium-sized engagements independently and participating as a key team member in larger transformation programs
  • ● Supporting presales, proposal development, and business development activities
  • ● Building constructive and trusted relationships with clients, both at technical and senior stakeholder level
  • ● Acting as a trusted advisor and role model for quality, integrity, and risk management practices
  • ● Contributing to the continued development of KPMG's cloud security services and professional network

Requirements

  • ● Proven experience in cloud security architecture, preferably with strong hands-on experience in Microsoft Azure and Microsoft 365
  • ● Practical experience with secure cloud migration, lift-and-shift scenarios, and Azure landing zone design or implementation
  • ● Strong understanding of Azure landing zone security, including management groups, subscriptions, RBAC, Azure Policy, Defender for Cloud, logging, network security, private endpoints, Key Vault, backup, and workload protection
  • ● Experience assessing, designing, or implementing security controls across multiple layers of the IT architecture stack
  • ● Strong knowledge of Identity and Access Management, including Microsoft Entra ID, Conditional Access, Privileged Identity Management, workload identities, and identity governance
  • ● Experience with cloud security assessments, security configuration reviews, privacy and regulatory risk assessments, and control framework mapping
  • ● Experience with DevSecOps concepts, infrastructure-as-code, policy-as-code, security automation, and continuous control monitoring is highly desirable
  • ● Experience delivering cybersecurity services in a commercial or consulting environment
  • ● Experience in one or more cloud service provider environments: Microsoft Azure, AWS, OCI, or GCP
  • ● Ability to analyze complex problems, identify core issues, and recommend practical and proportionate solutions
  • ● Ability to communicate clearly with both technical teams and senior stakeholders
  • ● Ability to translate complex cybersecurity topics into clear business risk, impact, and remediation advice
  • ● Ability to work at sustained levels of high intensity while maintaining quality, structure, and professionalism
  • ● Previous Big4 experience is a must for this role
  • ● Microsoft Certified: Cybersecurity Architect Expert - SC-100
  • ● Microsoft Certified: Cloud and AI Security Engineer Associate - SC-500
  • ● Microsoft Certified: Identity and Access Administrator Associate - SC-300
  • ● Microsoft Certified: Information Security Administrator Associate - SC-401
  • ● Microsoft Azure architecture or administrator certifications such as AZ-104 or AZ-305 are also beneficial
  • ● AWS Certified Security - Specialty
  • ● AWS Certified Solutions Architect - Professional
  • ● Google Cloud Professional Cloud Security Engineer
  • ● CISSP, CISM, CCSP, or comparable cybersecurity experience
  • ● SABSA, TOGAF, or comparable architecture experience is preferred