L2 Cloud Security Engineer

Role Overview

The L2 Cloud Security Engineer will be responsible for supporting daily security operations across multiple cloud environments including Microsoft Azure, Oracle Cloud Infrastructure (OCI), and Google Cloud Platform (GCP). This hands-on role involves managing identity and access requests, handling security alerts, applying standard changes, and performing routine administrative tasks using Microsoft Entra ID, Microsoft Defender suites, Intune, Logic Apps automation, and managing certificates and keys in GCP PKI and Azure Key Vault.

Key Responsibilities

• Manage privileged identity assignments, access elevation requests, and scheduled access reviews within Entra ID and Azure environments.
• Create and manage app registrations and service principals, including secret and certificate rotations and API permission assignments as requested.
• Provision and assign system and user-managed identities with appropriate RBAC roles for applications and platform teams.
• Troubleshoot Conditional Access and Multi-Factor Authentication issues, monitor sign-in logs, implement approved changes, and manage exclusions.
• Support Single Sign-On (SSO) onboarding and address common federation and SAML/OIDC challenges.
• Monitor and maintain Logic Apps automations, address failed runs, and implement minor fixes under supervision.
• Investigate and triage security alerts and incidents, following playbooks, performing containment, and escalating serious cases appropriately.
• Identify and address non-compliant resources flagged by Azure Policy, applying policies and exemptions as authorized.
• Daily review of Defender for Cloud secure scores and recommendations, coordinating remediation activities with resource owners.
• Monitor threat alerts on servers and containers including Azure Kubernetes Service (AKS), conducting preliminary investigations and managing Just-In-Time (JIT) VM access.
• Administer endpoint security and device management using Microsoft Defender for Endpoint and Intune.
• Oversee certificate lifecycle activities such as issuance, renewal, and revocation, complying with internal PKI policies and standards.
• Manage keys and secrets within Azure Key Vault including rotations and policy updates.
• Maintain accurate certificate and key inventories and proactively manage renewals.
• Follow IT Service Management procedures for tickets and change requests, ensuring complete and timely documentation.
• Maintain and update runbooks and standard operating procedures, documenting solutions for repeatable handling.
• Participate in shift handovers and on-call rotations to ensure continuous operations and communication.

Qualifications and Experience

• Bachelor’s or college degree in Computer Science, Information Technology, or related fields.
• 4 to 6 years overall IT experience with 2 to 3 years specifically in cloud security or cloud operations at an L2 level.
• Hands-on experience administering Microsoft Entra ID (including RBAC, PIM, App Registrations, and Conditional Access) and operating Microsoft Defender products.
• Experience working within incident and change management frameworks (ITSM processes).
• Familiarity with GCP or OCI platforms is advantageous.

Preferred Certifications

• Microsoft Azure Security Engineer Associate (AZ-500)
• Microsoft Identity and Access Administrator Associate (SC-300)
• Microsoft Security Operations Analyst Associate (SC-200)
• Microsoft Azure Administrator Associate (AZ-104)
• Microsoft Endpoint Administrator Associate (MD-102)
• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
• Google Cloud Associate Cloud Engineer
• Other vendor-neutral credentials such as CompTIA Security+ or Certificate of Cloud Security Knowledge (CCSK)

Technical Skills and Knowledge

• Proficient with Microsoft Entra ID, Azure RBAC, Azure Policy, Microsoft Defender for Cloud, Defender for Servers and Endpoint, Microsoft Intune, Azure Key Vault.
• Familiarity with Logic Apps, Defender for Containers including AKS, and Google Cloud Certificate Authority Service.
• Basic scripting skills using PowerShell, Azure CLI, or Kusto Query Language for investigations and routine automation.
• Understanding of identity and access management principles, PKI fundamentals (certificate lifecycle, key management, trust chains), and prevalent cloud security threats.
• Ability to follow detailed runbooks, prioritize tasks, and escalate issues as necessary.

Soft Skills

• Excellent written and oral communication skills for accurate ticket documentation.
• Strong attention to detail and effective teamwork abilities.
• Ability to function efficiently under pressure and manage multiple tasks.

About the Employer

Based in Doha, Qatar, Malomatia is a premier IT services and solutions provider renowned for integrating local and global talent to offer innovative technology solutions. Founded in 2008, Malomatia supports key sectors including government, healthcare, education, customs, and transportation. The company is committed to driving Qatar’s digital transformation through advanced cloud, cybersecurity, AI, and contact center technologies, aligning with the country's vision for a sustainable digital future.

Malomatia promotes a culture grounded in ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation. Joining Malomatia offers the chance to contribute to impactful technology solutions that shape Qatar’s future.