Mandiant s Security Transformation Services (STS) team partners directly with organizations navigating complex, high-stakes security transformations.

We are seeking a direct, field-tested Cloud Security Architect who has operated directly on the frontlines of major enterprise cloud transformations. You will work side-by-side with clients who are either transitioning critical workloads from traditional on-premises environments to cloud, or dealing with fragmented, multi-cloud sprawl where security controls, governance, and visibility are inconsistent.

You understand the true challenges of cloud adoption. Crucially, because client leadership often lacks visibility into the operational realities and cultural shifts required for cloud security, you will serve as a trusted technical advisor and mentor translating modern threat realities into clear architectural blueprints, updated operating models, and roadmaps that bridge engineering teams and executive management.

• Serve as the technical authority guiding clients through migrations from legacy on-premises datacenters to modern cloud, and rationalizing and elevating sprawling, fragmented multi-cloud footprints.
  
• Redesign cloud security architectures, modernize operational workflows (SecOps, DevSecOps, identity governance, CI/CD pipeline security), and enforce resilient security baselines aligned with Mandiant frontline threat intelligence.
  
• Bridge the communication gap between technical practitioners and senior management. Educate and coach client executives, business leaders, and engineering leads on why security transformation is necessary, how their operating model must adapt to cloud.
  
• Assist client teams in implementing pragmatic, defensive controls such as Zero Trust access models, workload identity federation, infrastructure-as-code (IaC) guardrails, container/Kubernetes security, and cloud network micro-segmentation.
  
• Translate root causes from active breach investigations into long-term architectural uplifts and measurable mitigation programs. Produce actionable, architectural blueprints, operating model frameworks, and executive-ready roadmaps.
  

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy .

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.

Desired Candidate Profile

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of technical cybersecurity experience, and experience in cloud architecture, enterprise infrastructure, and threat defense.
• Experience leading on-premises-to-cloud migrations or multi-cloud consolidation/remediation projects.
• Experience serving as a technical mentor and advisor to client leadership (CISO, CIO, VP of Infrastructure/Engineering) to deliver operational and cultural security change.
• Experience defining technical requirements, engineering roadmaps, and delivering architecture reviews across multi-stakeholder engagements.
• Must be eligible to secure and maintain High-Level Saudi Arabian National Security and Defense Clearances, equivalent to UK Developed Vetting (DV) clearance.

• Experience designing and securing Google Cloud or other cloud platforms, including native security tools, Identity and Access Management (IAM) policies, and VPC controls.
• Expertise in IAM, identity federation, PAM, and workload identity across hybrid enterprise environments.
• Experience with DevSecOps practices, CI/CD security gating, infrastructure as code, and CSPM/CWPP tooling.
• Ability to map adversary tactics to defenses, and hold professional security certifications (e.g., Google Cloud Professional Cloud Security Engineer, CISSP).
• Ability to deconstruct technical risks into clear narratives for executives and board-level stakeholders.
• Ability to travel up to 50% across Saudi Arabia and the wider region.