Senior Consultant - Cloud Security Architect

• Acting as a trusted advisor and role model for quality, integrity, and risk management practices

• Contributing to the continued development of KPMG’s cloud security services and professional network

The Person

We are looking for someone with a strong track record in cloud security architecture and consulting, with the ability to combine hands-on technical experience with strong client advisory skills.

The ideal candidate should have:

• Proven experience in cloud security architecture, preferably with strong hands-on experience in Microsoft Azure and Microsoft 365

• Practical experience with secure cloud migration, lift-and-shift scenarios, and Azure landing zone design or implementation

• Strong understanding of Azure landing zone security, including management groups, subscriptions, RBAC, Azure Policy, Defender for Cloud, logging, network security, private endpoints, Key Vault, backup, and workload protection

• Experience assessing, designing, or implementing security controls across multiple layers of the IT architecture stack

• Strong knowledge of Identity and Access Management, including Microsoft Entra ID, Conditional Access, Privileged Identity Management, workload identities, and identity governance

• Experience with cloud security assessments, security configuration reviews, privacy and regulatory risk assessments, and control framework mapping

• Experience with DevSecOps concepts, infrastructure-as-code, policy-as-code, security automation, and continuous control monitoring is highly desirable

• Experience delivering cybersecurity services in a commercial or consulting environment

• Experience in one or more cloud service provider environments: Microsoft Azure, AWS, OCI, or GCP

• Ability to analyze complex problems, identify core issues, and recommend practical and proportionate solutions

• Ability to communicate clearly with both technical teams and senior stakeholders

• Ability to translate complex cybersecurity topics into clear business risk, impact, and remediation advice

• Ability to work at sustained levels of high intensity while maintaining quality, structure, and professionalism

• Previous Big4 experience is a must for this role

Qualifications and Certifications

The candidate should ideally have a combination of cloud, security, and architecture certifications. We do not expect every candidate to hold all certifications, but one or more of the following would be highly valued.

• Microsoft Certified: Cybersecurity Architect Expert – SC-100

• Microsoft Certified: Cloud and AI Security Engineer Associate – SC-500

• Microsoft Certified: Identity and Access Administrator Associate – SC-300

• Microsoft Certified: Information Security Administrator Associate – SC-401

• Microsoft Azure architecture or administrator certifications such as AZ-104 or AZ-305 are also beneficial

• AWS Certified Security – Specialty

• AWS Certified Solutions Architect – Professional

• Google Cloud Professional Cloud Security Engineer

• CISSP, CISM, CCSP, or comparable cybersecurity experience

• SABSA, TOGAF, or comparable architecture experience is preferred

Source: KPMG Lower Gulf careers page