Cloud Security Consultant (Qatar) Doha

Requirements

Candidates must have at least 3 years of hands-on experience with Microsoft Azure and Microsoft 365 security solutions. A bachelor’s degree in a relevant field is required, and professional certifications such as SC-200, SC-300, or AZ-500 are highly desirable.

Job Summary

We are seeking an experienced Microsoft Security Consultant to join our
Cybersecurity Practice. In this role, you will work closely with our cloud,
infrastructure, and security teams to design, implement, and operate security
controls across the Microsoft security stack to protect our clients’ cloud and
hybrid environments.

Your responsibilities will include deploying and configuring Microsoft Defender
(including Defender for Endpoint, Defender for Cloud, Defender for Office 365,
and Defender for Identity) and Microsoft Purview for data governance, data loss
prevention, information protection, insider risk management, and compliance. You
will assess existing Microsoft 365 and Azure environments, identify security
gaps, harden configurations against established baselines, and continuously
monitor these platforms to ensure the confidentiality, integrity, and
availability of systems and data.

You will support the secure adoption of Microsoft cloud services across
Microsoft 365, Azure, and hybrid environments, configuring policies and controls
that align with organizational requirements, industry standards (such as the
Microsoft Cloud Security Benchmark, CIS, and NIST), and Qatari regulatory
requirements. This includes implementing conditional access, identity and access
management through Microsoft Entra ID, threat detection and response workflows,
and compliance and data protection controls through Purview.

RESPONSIBILITIES

* Microsoft Security Architecture and Assessment: Assess Microsoft 365, Azure,
and hybrid environments to identify security risks and design appropriate
controls using native Microsoft capabilities. Conduct security reviews of
Azure subscriptions, workloads, and configurations across compute, storage,
networking, identity, and platform services, using Microsoft Defender for
Cloud secure score and recommendations as a baseline. Provide detailed
assessment reports with clear, actionable remediation recommendations aligned
with the Microsoft Cloud Security Benchmark, CIS, and NIST.
* Microsoft Security Governance: Define, implement, and maintain cloud security
governance frameworks, including security policies, standards, baselines, and
control frameworks built on Azure Policy, Microsoft Defender for Cloud
regulatory compliance, and Purview governance capabilities. Establish clear
roles and responsibilities through RACI models and support the development of
operating procedures to ensure consistent, repeatable, and auditable security
practices across Microsoft environments.
* Security Monitoring and Threat Detection: Implement and operate Microsoft
Defender and Microsoft Sentinel to detect misconfigurations, vulnerabilities,
and suspicious activities. Analyze alerts and incidents across the Defender
XDR portal and Sentinel, build detection rules and analytics, investigate
potential incidents, and support timely response and remediation to maintain
the confidentiality, integrity, and availability of cloud environments.
* Identity and Access Management: Review and support the secure implementation
of identity and access controls through Microsoft Entra ID, including
role-based access control, least privilege, conditional access, multifactor
authentication, and Privileged Identity Management across Microsoft cloud
platforms and services.
* Cloud Security Configuration: Implement native Azure security controls
including Microsoft Defender for Cloud, network security groups, encryption,
key management (Azure Key Vault), and logging and monitoring to enforce a
strong security posture.

QUALIFICATIONS

* Education: Bachelor’s / college degree in Computer Science, Information
Technology, or a related field.
* Experience: At least 3 years of hands-on experience implementing and
configuring Microsoft Azure and Microsoft 365 security solutions, or a
closely related role, with demonstrable experience deploying Microsoft
Defender and Microsoft Purview.
* Certifications: Relevant professional certifications are highly desirable.
These may include, but are not limited to:
* Microsoft Certified: Security Operations Analyst Associate (SC-200)
* Microsoft Certified: Identity and Access Administrator Associate (SC-300)
* Microsoft Certified: Information Protection and Compliance Administrator
Associate (SC-400)
* Microsoft Certified: Azure Security Engineer Associate (AZ-500)
* Microsoft Certified: Cybersecurity Architect Expert (SC-100)
* Microsoft Certified: Azure Administrator Associate (AZ-104) or Azure
Solutions Architect Expert (AZ-305)
* Vendor-agnostic security certifications (CISSP, CCSP, CSA CCSK, GIAC, etc.)
* Technical Skills: Strong hands-on experience deploying and configuring the
Microsoft security stack, including Microsoft Defender (Defender for Cloud,
Endpoint, Office 365, and Identity), Microsoft Sentinel, Microsoft Purview,
and Microsoft Entra ID. Experience with core Azure services across compute,
storage, networking, and identity, along with native security tooling such as
Key Vault, Network Security Groups, and Azure Policy.
* Knowledge: Solid understanding of cloud architecture principles and the
Microsoft Cloud Adoption Framework and Azure Well-Architected Framework.
Working knowledge of security concepts including Zero Trust, least privilege,
network segmentation, and encryption, with practical understanding of how
Microsoft technologies implement them (Conditional Access, Privileged
Identity Management, Defender for Cloud secure score). Familiarity with the
Microsoft Cloud Security Benchmark, CIS Benchmarks, NIST, and ISO 27001.
Knowledge of Qatar National Information Assurance (NIA) is a plus.

Responsibilities

The consultant will design, implement, and operate security controls across the Microsoft security stack to protect client cloud and hybrid environments. Responsibilities include conducting security assessments, defining governance frameworks, and managing threat detection and response workflows.

We are a job aggregator. All rights belong to the original company or recruiter. We do not claim ownership of any listings.