Senior Cloud Security Consultant - Azure Security Assessment Position Overview We are seeking experienced Cloud Security Consultants for a 10-week onsite engagement in Abu Dhabi UAE to conduct a comprehensive Azure Cloud Security Governance Assessment for a major enterprise client This role requires deep technical expertise in Azure security strong consulting skills and the ability to work effectively in a client-facing environment Engagement Details Position Title Senior Cloud Security Consultant Location Abu Dhabi UAE 100 onsite Duration 10 weeks with possibility of extension Start Date Immediate Flexible Travel Required Yes relocation to Abu Dhabi for engagement duration Clearance Required UAE security clearance assistance provided Role Summary As a Senior Cloud Security Consultant you will be part of a specialized team conducting an in-depth security assessment of the client s Azure cloud environment You will evaluate technical controls governance frameworks and compliance posture against UAE regulations and international standards providing expert recommendations to enhance the organization s cloud security maturity Key Responsibilities Technical Assessment 60 1 Azure Security Architecture Review o Evaluate Azure landing zone design and implementation o Assess network segmentation and security boundaries o Review hub-spoke and virtual network architectures o Analyze traffic flow and data movement patterns o Validate defense-in-depth implementation 2 Security Configuration Assessment o Review Azure Policy and Blueprint implementations o Assess Network Security Groups NSGs configurations o Evaluate Azure Firewall and Web Application Firewall rules o Validate Azure Security Center Defender configurations o Review Key Vault and encryption implementations 3 Identity Access Management o Assess Azure AD configuration and security settings o Review Privileged Identity Management PIM implementation o Evaluate conditional access policies and MFA enforcement o Analyze RBAC roles and permissions o Review service principal and managed identity usage 4 Compliance Governance o Map controls to UAE CSC National Cloud Security Policy o Assess compliance with NIST CSF CIS Azure and ISO 27017 o Review Azure governance framework and policies o Evaluate management group hierarchy and subscriptions o Validate regulatory compliance controls 5 Data Security Privacy o Review data classification and labeling practices o Assess encryption at rest and in transit o Evaluate data residency and sovereignty controls o Review database security configurations o Validate data loss prevention mechanisms Consulting Advisory 25 1 Stakeholder Engagement o Conduct interviews with technical and business stakeholders o Facilitate workshops and discovery sessions o Present findings to technical and executive audiences o Build relationships with client teams o Manage stakeholder expectations 2 Risk Assessment Remediation o Identify and document security vulnerabilities o Perform risk scoring and prioritization o Develop practical remediation recommendations o Create implementation roadmaps o Provide cost-benefit analysis for recommendations 3 Knowledge Transfer o Conduct training sessions for client teams o Develop technical documentation and guides o Share best practices and industry insights o Mentor junior team members o Create reusable templates and frameworks Documentation Reporting 15 1 Report Development o Document technical findings with evidence o Write clear and actionable recommendations o Develop executive summaries o Create compliance matrices and gap analyses o Produce technical remediation playbooks 2 Presentation Materials o Develop executive presentations o Create technical deep-dive materials o Design visual dashboards and heat maps o Prepare workshop materials o Document architecture diagrams Required Qualifications Education Bachelor s degree in Computer Science Information Security or related field Master s degree preferred but not required Experience Minimum 5-7 years of information security experience Minimum 3-4 years of hands-on Azure security experience Minimum 2-3 years of security consulting assessment experience Experience with enterprise-scale Azure deployments 500 resources Experience working in the Middle East region preferred Technical Skills Azure Security Expert Level - Azure Security Center Microsoft Defender for Cloud - Azure Policy and Blueprints - Azure AD and Privileged Identity Management - Azure Key Vault and encryption services - Azure Firewall and Network Security Groups - Azure Monitor and Log Analytics - Azure DevOps security and CI CD pipelines - Azure Kubernetes Service AKS security - Azure SQL and Cosmos DB security Security Frameworks Standards - NIST Cybersecurity Framework - CIS Controls and Benchmarks - ISO 27001 27017 27018 - CSA Cloud Controls Matrix - OWASP Top 10 and API Security - Zero Trust Architecture principles - Well-Architected Framework Security Pillar Tools Technologies - PowerShell and Azure CLI - ARM Templates and Bicep - Terraform Infrastructure as Code - Git and version control - Security scanning tools Qualys Nessus etc - SIEM platforms Sentinel Splunk QRadar - DevSecOps tools and practices Cloud Platforms - Microsoft Azure Primary - Knowledge of AWS GCP Advantageous - Hybrid cloud architectures - Multi-cloud security considerations Soft Skills Consulting Excellence - Outstanding verbal and written communication - Strong presentation and facilitation skills - Ability to explain technical concepts to non-technical audiences - Qualified demeanor and appearance - Cultural sensitivity and adaptability Problem-Solving - Strong analytical and critical thinking abilities - Creative approach to complex problems - Ability to work under pressure - Detail-oriented with quality focus - Self-motivated and proactive Collaboration - Team player with collaborative mindset - Ability to work with diverse stakeholders - Conflict resolution skills - Mentoring and coaching abilities - Crossfunctional coordination Certifications Preferred Microsoft Certified Azure Security Engineer Associate AZ-500 Microsoft Certified Azure Solutions Architect Expert Microsoft Certified Cybersecurity Architect Expert Microsoft Certified Azure DevOps Engineer Expert Certifications Preferred CISSP Certified Information Systems Security Professional CCSP Certified Cloud Security Professional CISA Certified Information Systems Auditor CEH Certified Ethical Hacker CompTIA Security AWS GCP Security Certifications Language Requirements English Fluent written and spoken - Mandatory Arabic Basic understanding - Advantageous Job Type Contractual Temporary Contract length 6 months Benefits Commuter assistance Expected Start Date 03 10 2025