Senior Cloud Infra Security Engineer (Category – Architect) Sector: Oil and Gas Department: IT Infrastructure & Security Location: Doha, Qatar About Us: We are a leading oil and gas company in the midst of an ambitious Digital Transformation (DT) program, leveraging cutting-edge Artificial Intelligence to enhance operational efficiency, accelerate decision-making, optimize resource management, and drive sustainable growth across our upstream, midstream, and downstream operations. Our Vision: Engineering the Future of Energy with Data Our digital transformation is moving from strategy to execution. We have a clear, funded roadmap of high-impact data and AI use cases designed to fundamentally re-engineer our operations—from improving drilling efficiency and implementing predictive maintenance on critical assets to enhancing subsurface modeling for better exploration outcomes. This is not just an IT upgrade; it is a core business imperative to create a more resilient, efficient, and intelligent energy company. We are now building the core team of innovators and builders to deliver these initiatives. This role is critical to bringing that vision to life, moving beyond theory to engineer the specific, robust data solutions that will power our most strategic projects and deliver measurable value. Job Description
The Senior Cloud & Network Infra Engineering consultant will be responsible for designing, implementing, and safeguarding the company’s core digital and network infrastructure through robust architecture, secure connectivity, and proactive defence strategies. The role encompasses network design, routing and switching, firewalls, load balancers (LB), web application firewalls (WAF), VPNs, and hybrid cloud security across on-premises and cloud (Azure, GCP) environments.
The engineer will ensure high availability, resilience, and compliance of all network and security systems, providing expert guidance to cross-functional teams and ensuring alignment with corporate cybersecurity and infrastructure standards.
Key Responsibilities Infrastructure & Network Security Management • Design, deploy, and manage secure enterprise and multi-cloud (Azure/GCP) network infrastructures. • Configure and maintain routing, switching, WAN/LAN, VPN, DNS, load balancing, and hybrid connectivity solutions. • Implement and manage network security controls, including firewalls, WAFs, IDS/IPS, IAM, ACLs, and Zero Trust architectures. • Monitor, troubleshoot, and optimize network and cloud performance, availability, and scalability. • Integrate network and security telemetry with monitoring and SIEM platforms for enhanced visibility and threat detection. • Automate infrastructure deployment and operations using Terraform, IaC, scripting, and CI/CD pipelines. • Collaborate with Cloud, Security, Infrastructure, and DevOps teams to deliver secure and resilient solutions. • Ensure compliance with cybersecurity standards, policies, and regulatory requirements (e.g., ISO 27001, NIA Qatar). • Provide technical leadership during major incidents, complex deployments, and cloud transformation initiatives. • Maintain technical documentation, operational procedures, and disaster recovery capabilities to support business continuity. Cloud Security (Azure & GCP) • Design and enforce cloud network topologies and security configurations using native controls such as Azure Virtual Networks, Network Security Groups (NSGs), Firewalls, Private Endpoints, and Google VPC Service Controls. • Secure interconnectivity between on-premises and cloud through ExpressRoute, VPN gateways, and hybrid peering. • Integrate security-by-design practices into infrastructure-as-code (IaC) and DevSecOps pipelines to ensure consistent and automated network provisioning. • Manage cloud-native load balancing, WAF, DDoS protection, and application gateways for secure application delivery.
Threat Detection, Incident Response & Compliance • Monitor and analyze network traffic to detect anomalies, intrusions, and advanced threats. • Respond to network security incidents, coordinate investigation and remediation efforts, and implement corrective actions. • Maintain configuration baselines, patch management routines, and ensure full compliance with corporate and regulatory security standards. • Perform periodic risk assessments, vulnerability scans, and network penetration reviews to identify and mitigate risks. Advisory & Architecture Support • Participate in design reviews of new digital transformation projects, ensuring alignment with network and security architecture standards. • Provide technical leadership and mentorship to network and infrastructure teams, fostering a culture of secure design and continuous improvement. • Advise stakeholders on network resilience, redundancy, and secure connectivity strategies across all business units. Required Skills and Qualifications: • Bachelor's degree in computer engineering, Cybersecurity, Information Systems, or related field. • 10+ years of experience in network and infrastructure security within large-scale enterprise IT or OT environments. • Proven expertise in: o Enterprise networking (Routing, Switching, TCP/IP, DNS, BGP, VPN) o Network security (Firewalls, WAF, IPSec, SSL/TLS, Zero Trust) o Cloud networking & security (Azure, GCP) o Azure services (VNet, Firewall, NSG, VPN, ExpressRoute, Private Link) o GCP services (VPC, Firewall, VPN, Interconnect, Cloud NAT) o Load balancing (F5, Azure Application Gateway, NGINX Plus) o Infrastructure automation (Terraform, Ansible, ARM Templates) o Linux/Windows administration and scripting o Strong Troubleshooting and root-cause analysis, incident response • Experience with SIEM, SOAR, and threat intelligence platforms (e.g., Azure Sentinel, Chronicle, Splunk). • Excellent problem-solving skills and ability to lead incident response efforts under pressure. Technical Proficiencies • Enterprise Firewalls & Security Appliances: Palo Alto, Fortinet, Cisco ASA • Load Balancers & WAF: F5, Azure Application Gateway, Cloudflare, GCP equivalents • Routing & Switching: Cisco, Juniper, Layer 3 segmentation, BGP/OSPF • Cloud Security Tools: Azure Security Center, Microsoft Defender for Cloud, GCP Security Command Center • IAM & Access Control: Azure AD Conditional Access, GCP IAM, MFA, SSO • Automation & IaC: Terraform, Ansible, ARM templates Preferred Qualifications • Professional certifications such as CISSP, CCSP, Cybersecurity Architect Expert (SC-100) or AZ-500 (Azure Security Engineer) or Google Cloud Security Engineer • Experience in oil & gas, energy, utilities, or critical infrastructure sectors • Familiarity with OT (Operational Technology) environments and ICS/SCADA systems • Exposure to multi-cloud security strategy and cloud-native DevSecOps practices
Ideal Candidate • A Highly hands-on Senior Cloud Engineer with strong expertise in Microsoft Azure and Google Cloud Platform (GCP) - specializing in cloud networking, who designs it, builds it, secures it, deploys it and troubleshoots it. This is not a purely architectural role. We are looking for someone who is comfortable getting hands-on with the technology and taking ownership from design through production support.