cloud security (infosec) specialist Jobs in Doha

cloud security (infosec) specialist

devops engineer

devops engineer, ips

senior infrastructure & cloud specialist Jobs in Doha

senior infrastructure & cloud specialist

ai engineer

cloud security engineer

Codvo.ai

<div><div><div>Senior Cloud Network Security Engineer (Category &ndash; Architect)
Sector: Oil and Gas
Department: IT Infrastructure &amp; Security
Location: Doha, Qatar 
Company Overview:
At Codvo, software and people transformations go hand-in-hand. We are a global empathy-led technology services company. Product innovation and mature software engineering are part of our core DNA. Respect, Fairness, Growth, Agility, and Inclusiveness are the core values that we aspire to live by each day. 
We continue to expand our digital strategy, design, architecture, and product management capabilities to offer expertise, outside-the-box thinking, and measurable results. 
Job Description 
The Senior Cloud &amp; Network Security Engineer will be responsible for designing, implementing, and safeguarding the company&rsquo;s core digital and network infrastructure through robust architecture, secure connectivity, and proactive defence strategies. The role encompasses network design, routing and switching, firewalls, load balancers (LB), web application firewalls (WAF), VPNs, and hybrid cloud security across on-premises and cloud (Azure, GCP) environments. 
The engineer will ensure high availability, resilience, and compliance of all network and security systems, providing expert guidance to cross-functional teams and ensuring alignment with corporate cybersecurity and infrastructure standards. 
Key Responsibilities
Infrastructure &amp; Network Security Management<ul><li>Design, deploy, and manage secure enterprise network architectures spanning on-premises data centers, field assets, and multi-cloud environments (Azure and GCP).</li><li>Configure and maintain routing and switching infrastructure, including VLANs, BGP, OSPF, and WAN/LAN connectivity.</li><li>Manage enterprise firewalls, VPNs, load balancers (F5, Azure Application Gateway), WAFs, and IDS/IPS systems to ensure end-to-end network security.</li><li>Implement and enforce network segmentation, access control lists (ACLs), and zero trust network policies to secure sensitive environments.</li><li>Ensure availability, performance, and scalability of network services through continuous monitoring, optimization, and proactive capacity planning.</li><li>Integrate network telemetry and logs into enterprise SIEM platforms to support threat detection, visibility, and response.</li><li>Collaborate with DevOps, Cloud, and Infrastructure teams to embed security principles within all network and infrastructure deployments.</li><li>Ensure compliance with internal cybersecurity frameworks and external standards such as ISO 27001, NIA Qatar, and energy sector security mandates.</li></ul>
Cloud Security (Azure &amp; GCP)<ul><li>Design and enforce cloud network topologies and security configurations using native controls such as Azure Virtual Networks, Network Security Groups (NSGs), Firewalls, Private Endpoints, and Google VPC Service Controls.</li><li>Secure interconnectivity between on-premises and cloud through ExpressRoute, VPN gateways, and hybrid peering.</li><li>Integrate security-by-design practices into infrastructure-as-code (IaC) and DevSecOps pipelines to ensure consistent and automated network provisioning.</li><li>Manage cloud-native load balancing, WAF, DDoS protection, and application gateways for secure application delivery.</li></ul> 
Threat Detection, Incident Response &amp; Compliance<ul><li>Monitor and analyze network traffic to detect anomalies, intrusions, and advanced threats.</li><li>Respond to network security incidents, coordinate investigation and remediation efforts, and implement corrective actions.</li><li>Maintain configuration baselines, patch management routines, and ensure full compliance with corporate and regulatory security standards.</li><li>Perform periodic risk assessments, vulnerability scans, and network penetration reviews to identify and mitigate risks.</li></ul>
Advisory &amp; Architecture Support<ul><li>Participate in design reviews of new digital transformation projects, ensuring alignment with network and security architecture standards.</li><li>Provide technical leadership and mentorship to network and infrastructure teams, fostering a culture of secure design and continuous improvement.</li><li>Advise stakeholders on network resilience, redundancy, and secure connectivity strategies across all business units.</li></ul> 
Required Skills and Qualifications:<ul><li>Bachelor's degree in Computer Engineering, Cybersecurity, Information Systems, or related field.</li><li>10+ years of experience in network and infrastructure security within large-scale enterprise IT or OT environments.</li><li>Proven expertise in:</li></ul>
o Routing and switching (Cisco, Juniper, or equivalent)
o Enterprise firewalls (Palo Alto, Fortinet, Cisco ASA)
o Load balancers (F5, Azure Application Gateway, NGINX Plus)
o Web Application Firewalls (WAF) and reverse proxy systems
o VPN, IPSec, SSL/TLS, and Zero Trust network architectures
o Cloud networking and security (Azure, GCP)
o Network automation (Terraform, Ansible, ARM templates)<ul><li>Experience with SIEM, SOAR, and threat intelligence platforms (e.g., Azure Sentinel, Chronicle, Splunk).</li><li>Excellent problem-solving skills and ability to lead incident response efforts under pressure.</li></ul>
Technical Proficiencies<ul><li>Enterprise Firewalls &amp; Security Appliances: Palo Alto, Fortinet, Cisco ASA</li><li>Load Balancers &amp; WAF: F5, Azure Application Gateway, Cloudflare, GCP equivalents</li><li>Routing &amp; Switching: Cisco, Juniper, Layer 3 segmentation, BGP/OSPF</li><li>Cloud Security Tools: Azure Security Center, Microsoft Defender for Cloud, GCP Security Command Center</li><li>IAM &amp; Access Control: Azure AD Conditional Access, GCP IAM, MFA, SSO</li><li>Automation &amp; IaC: Terraform, Ansible, ARM templates</li></ul>
Preferred Qualifications<ul><li>Professional certifications such as CISSP, CCSP, Cybersecurity Architect Expert (SC-100) or AZ-500 (Azure Security Engineer) or Google Cloud Security Engineer</li><li>Experience in oil &amp; gas, energy, utilities, or critical infrastructure sectors</li><li>Familiarity with OT (Operational Technology) environments and ICS/SCADA systems</li><li>Exposure to multi-cloud security strategy and cloud-native DevSecOps practices</li></ul></div> 

<div><div>Sub-Department:</div>
<div>Business analyst</div></div></div></div>

Senior Cloud Network Security Engineer

Taalum Group

We are seeking a highly skilled Network &amp; Security Engineer to join our Cloud and Infrastructure team. The ideal candidate will have proven experience designing, implementing, and managing hybrid (cloud and on-premises) network and security architecture. This role focuses on ensuring high availability, scalability, and security of cloud and on-prem infrastructure, with emphasis on cloud provisioning, migration, and modernization. The engineer will also contribute to automating network infrastructure through Infrastructure as Code (IaC) and integrating these capabilities within CI/CD pipelines to support agile operations.Education &amp; Experience:<ul><li>Must have at least bachelor&rsquo;s in computer science, Information Technology, or a related discipline.</li><li>3&ndash;5+ years in network engineering, cloud security, or hybrid (cloud/on-prem) infrastructure roles.</li></ul>Preferred Certifications:<ul><li>Cloud: Azure Administrator (AZ-104), Azure Network Engineer Associate (AZ-700), Azure Security Engineer Associate (AZ-500), Google Cloud Network Engineer, Google Cloud Security Engineer.</li><li>Network &amp; Security: CCNA/CCNP, CompTIA Security+, Palo Alto PCNSE, Fortinet NSE, or CISSP.</li></ul>Job Type: Full-time

Network & Security Engineer (Cloud and Infrastructure)

AL-Adyat for Consultant

We are seeking a highly skilled Cloud Security Engineer to design, implement, and manage security solutions for our cloud-based infrastructure. The ideal candidate will have deep expertise in cloud platforms (AWS, Azure, GCP), strong understanding of security best practices, and hands-on experience with security tools and technologies.Key Responsibilities:<ul><li>Design and implement security architectures for cloud environments (AWS, Azure, GCP).</li><li>Conduct regular cloud security assessments and audits.</li><li>Develop and enforce security policies, procedures, and standards for cloud environments.</li><li>Monitor cloud environments for threats and vulnerabilities using SIEM and other monitoring tools.</li><li>Respond to cloud-related security incidents and provide forensic analysis.</li><li>Collaborate with DevOps and development teams to integrate security into CI/CD pipelines.</li><li>Implement identity and access management (IAM) controls and policies.</li><li>Manage encryption, key management, and data protection mechanisms in the cloud.</li><li>Stay current with emerging threats, technologies, and regulatory changes.</li></ul>Requirements:Education &amp; Experience:<ul><li>Bachelor's degree in Computer Science, Information Security, or related field.</li><li>3+ years of experience in cloud security or cybersecurity.</li><li>Experience with at least one major cloud platform (AWS, Azure, or GCP).</li></ul>Technical Skills:<ul><li>Strong knowledge of cloud-native security tools (e.g., AWS Security Hub, Azure Defender).</li><li>Familiarity with SIEM tools, firewalls, IDS/IPS, and endpoint protection.</li><li>Understanding of compliance frameworks: ISO 27001, NIST, GDPR, HIPAA, etc.</li><li>Experience with infrastructure-as-code (Terraform, CloudFormation, etc.).</li><li>Knowledge of scripting languages (Python, Bash, etc.).</li></ul>Job Type: Full-timePay: QAR13,000.00 - QAR15,000.00 per monthExperience:<ul><li>Cloud security : 4 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li></ul>

Cloud Security

Sight Spectrum

Key Responsibilities:<ul><li>Design and manage secure hybrid network architectures (on-prem &amp; multi-cloud).</li><li>Configure routing, switching (BGP, OSPF), firewalls (Palo Alto, Fortinet, Cisco ASA), VPNs, and load balancers (F5, Azure Application Gateway).</li><li>Implement WAFs, zero trust policies, and ensure compliance (ISO 27001, NIA Qatar).</li><li>Secure cloud connectivity using ExpressRoute, NSGs, Private Endpoints, and hybrid VPNs.</li><li>Integrate network telemetry with SIEM/SOAR tools (Azure Sentinel, Chronicle, Splunk).</li><li>Support incident response, threat detection, and continuous risk assessment.</li><li>Collaborate with Cloud, DevOps, and Security teams to embed security-by-design.</li></ul>Required Skills &amp; Experience:<ul><li>10+ years in network &amp; infrastructure security (enterprise scale).</li><li>Strong in routing/switching, firewalls, VPN, WAF, load balancing, and zero trust.</li><li>Hands-on with Azure &amp; GCP cloud security, Terraform, Ansible, and IaC tools.</li><li>Certifications preferred: CISSP, CCSP, AZ-500, SC-100, or GCP Security Engineer.</li><li>Experience in Oil &amp; Gas, Energy, or Critical Infrastructure sectors preferred.</li></ul>Job Type: Contract Contract length: 12 months

Senior Data Engineer

ECCO Gulf Majorel Qatar

<div>Job Description
Job Specific Skills<div> 
<ul><li>Cloud Governance and Standards.</li><li>Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.</li><li>Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.</li><li>Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails.</li><li>Logging &amp; Monitoring Requirements: Define mandatory telemetry. (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.</li><li>Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.</li><li>IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.</li><li>Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.</li><li>Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.</li><li>Nice-to-Have / Depth Areas</li></ul>
o DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates 
(Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus. 
o Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines. 
o SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls). 
o Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.</div>
Minimum Qualification

Bachelor&rsquo;s in computer science, Information Security, IT and equivalent 
hands&#8209;on experience.
Certifications

CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC&#8209;100/SC&#8209;200, AWS Security&#8209;Specialty, 
GCP Manpower Cloud Security Engineer. 
Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800&#8209;53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud). 
Minimum Experience
3&ndash;5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.</div>

Cloud Security (InfoSec) Specialist

ECCO Gulf WLL

<div>
 
 Job Description
 
 
 
 
 Job Specific Skills
 
 
 
 <ul>
 <li>
 Cloud Governance and Standards.
 </li>
 <li>
 Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
 </li>
 <li>
 Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
 </li>
 <li>
 Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails.
 </li>
 <li>
 Logging &amp; Monitoring Requirements: Define mandatory telemetry. (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.
 </li>
 <li>
 Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.
 </li>
 <li>
 IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
 </li>
 <li>
 Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.
 </li>
 <li>
 Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.
 </li>
 <li>
 Nice-to-Have / Depth Areas
 </li>
 <li>
 DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates
 
 
 </li>
 </ul>
 (Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus.
 
 
 <ul>
 <li>
 Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines.
 </li>
 <li>
 SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls).
 </li>
 <li>
 Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.
 
 
 </li>
 </ul>
 
 Minimum Qualification
 
 
 
 Bachelor&rsquo;s in computer science, Information Security, IT and equivalent
 
 
 hands‑on experience.
 
 
 
 Certifications
 
 
 
 CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC‑100/SC‑200, AWS Security‑Specialty,
 
 
 GCP Manpower Cloud Security Engineer.
 
 
 Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800‑53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud).
 
 
 
 Minimum Experience
 
 
 
 3&ndash;5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.
</div>

<div>
 <ul>
 <li>
 Cloud Governance and Standards
 
 </li>
 <li>
 Risk &amp; Exception Management: Run risk assessments on cloud services/Servicesloads; propose compensating controls; operate exception register with expiry and review cadence.
 
 </li>
 <li>
 Identity &amp; Access Governance: Design RBAC/ABAC models, SoD matrices, privileged access patterns, break-glass procedures; lead quarterly access reviews with evidence capture.
 
 </li>
 <li>
 Data Protection: Classify data; specify encryption at rest/in transit; key management lifecycle (KMS/Key Vault/Cloud KMS), BYOK/HYOK guidance, DLP guardrails
 
 </li>
 <li>
 Logging &amp; Monitoring Requirements: Define mandatory telemetry (CloudTrail/Azure Activity/GCP Audit), retention/integrity controls, and SIEM onboarding schema/use cases.
 
 </li>
 <li>
 Posture Management (CSPM/CIEM/CNAPP): Configure and tune policies; triage high-severity findings; route ownership; track remediation SLAs and metrics.
 
 </li>
 <li>
 IR Enablement (Cloud): Author cloud-specific playbooks (privilege escalation, exposed storage, key compromise); define evidence collection and containment prerequisites for SOC.
 
 </li>
 <li>
 Compliance &amp; Audit Readiness: Map controls to ISO 27001/GDPR/NIA/Qatar Cloud Policy frameServices/ etc.; produce test procedures and evidence plans; support audits without material findings.
 
 </li>
 <li>
 Stakeholder Communication: Clear, concise risk narratives and decision records for engineering leads, product owners, and auditors.
 
 </li>
 <li>
 Nice-to-Have / Depth Areas:
 
 </li>
 </ul>
 - DevSecOps Oversight: Policy-as-code checks (OPA/Kyverno/Conftest), IaC compliance gates (Terraform/ARM/Bicep), artifact integrity (signing/SBOM/SLSA) governance focus.
 
 - Kubernetes/Container Governance: Pod Security Standards, admission policy governance, registry controls, and runtime policy baselines.
 
 - SaaS Security Reviews: Due diligence and ongoing assurance for high-risk SaaS (identity, data residency, logging, export controls).
 
 - Data Residency &amp; Sovereignty: Regulatory mapping and guardrail design for regional constraints.
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s in computer science, Information Security, IT and equivalent hands‑on experience.
 
 </li>
 <li>
 Certifications (nice‑to‑have): CCSP, CISSP, ISO 27001 Lead Implementer/Auditor, Microsoft SC‑100/SC‑200, AWS Security‑Specialty, GCP Manpower Cloud Security Engineer.
 
 </li>
 <li>
 Knowledge: CIS Benchmarks, ISO 27001/27017/27018, NIST 800‑53/CSF, CSA CCM, MITRE ATT&amp;CK (Cloud)
 
 </li>
 <li>
 5+ years cloud security (governance/assurance) with hands-on in at least one major cloud.
 
 </li>
 </ul>
</div>

Explore 1059+ Cloud security engineer in Doha this December. Find roles across top companies and apply now to boost your career.

1059 cloud security engineer jobs IN Doha

Senior Cloud Network Security Engineer

Network & Security Engineer (Cloud and Infrastructure)

Cloud Security

Senior Data Engineer

Cloud Security (InfoSec) Specialist

Cloud Security (InfoSec) Specialist

Cloud Security (InfoSec) Specialist