Cloud Architect

Momentum Abu Dhabi Emirate, United Arab Emirates

Momentum Corporate Services is a leading entertainment group based in Abu Dhabi, United Arab Emirates. Our portfolio includes mobile game development and publishing, virtual reality experiences, iGaming, esports management, and content platform services. We are dedicated to creating immersive and personalized entertainment experiences that push the boundaries of innovation in the industry.

Role

Azure Cloud Security Architecture

• Develop & implement a comprehensive security architecture for the Azure cloud environment and DR capability, ensuring alignment with best practices and regulatory requirements.
• Define and support the implementation of security controls across each of the Azure services, e.g., networking, storage, compute, and identity services.
• Support the design and configuration of Azure AD to manage user identities, roles, and access controls across the Azure environment.
• Support the configuration of identity management solutions e.g. SSO, MFA, and conditional access in Azure AD to enhance secure authentication and authorization.

Network Security Controls

• Design and support the management of a secure network architecture in Azure including Virtual network configurations, network security groups, and firewall settings to protect cloud resources.
• Work with the Technical Operations team to support the configuration of Azure firewalls and the Web Application Firewall (WAF) to secure access to cloud resources, ensuring perimeter protection against external threats.

Data Security

• Ensure that technical & policy level controls required to protect sensitive data are implemented e.g. data classifications, encryption at rest/transit, access controls for databases and other data resources in Azure.
• Ensure that crypto key management solutions for keys, secrets, and certificates are implemented effectively, controlling access to sensitive data.
• Work with the Security Operations Centre to ensure monitoring tools are configured correctly, providing continuous and real-time visibility into the security posture of Azure resources and other critical components within the infrastructure.

Security Assessments, Compliance & Risk Management

• Conduct periodic risk assessments of the Azure cloud infrastructure and other critical systems to identify vulnerabilities, optimization opportunities, and recommend remediation steps to address any gaps.
• Work with Technical Operations and other stakeholders to ensure that the Azure cloud environment is designed and configured in line with relevant regulatory standards e.g. ISO27001, PCI DSS, GLI Technical Standards, etc.
• Conduct internal/external audits with the necessary documentation & evidence to demonstrate the implementation of security controls within the Azure cloud environment.
• Define the framework for secure software development within the organization, working with Development & Technical Operations to integrate security into CI/CD pipelines, ensuring secure deployment of applications in Azure.
• Provide ongoing support and guidance on secure coding and configuration practices, ensuring the build and deployment of secure and resilient applications.

Zero Trust Security Principles

• Develop a zero-trust security model for the Azure cloud infrastructure, enforcing continuous authentication, micro-segmentation, and least privileged access across cloud resources.
• Ensure security is maintained across all layers of the cloud environment including identity, network, applications, and data.

Security Policies & Standards

• Support the development and implementation of security policies, standards, and procedures for Azure cloud services, ensuring consistency in the operation of technical controls.
• Provide ongoing support, guidance, and training to technical stakeholders in Azure cloud security best practices.

Secure 3rd Party Integrations

• Assess and support the configuration of secure integrations with 3rd party applications, ensuring external connections adhere to security standards to protect sensitive data.
• Work with the SOC to regularly monitor 3rd party access to the infrastructure, implementing access controls and protective measures where necessary.

Skills Required

• Cloud security: expert in designing secure cloud infrastructures, with strong security controls for public, private, and hybrid cloud environments. Demonstrable knowledge of cloud security frameworks and ensuring compliance with industry standards.
• Network & infra security: Strong understanding of secure network design & segmentation, including firewalls, VPS, IDS/IPS, and web application firewalls. Experienced in systems hardening for applications, databases, and network components.
• Identity & Access: Proficient in designing & managing secure IAM systems with RBAC, MFA, and privileged access management.
• Encryption & data protection: Experience utilizing encryption technologies and key management solutions within cloud environments, in addition to implementing DLP solutions to protect sensitive data.
• Disaster recovery planning: Experience supporting the design and implementation of DR solutions to ensure the availability of critical systems and data in case of failure or outage.
• Tools & technologies: Proven experience with cloud security tools e.g. Azure Security Center and other vulnerability management tools used for managing security patches and updates across the infrastructure.

Experience

• 5-10 years' experience in information security or cloud-based IT infrastructure.
• Proven experience in information security, IT infrastructure, or cloud architecture roles with a focus on securing cloud environments, ideally Azure.
• Demonstrated ability to design, implement, and manage secure infrastructures, including identity and access management, network security, and data protection.
• Extensive hands-on experience with Azure security features, including Azure Active Directory (Azure AD), Azure Security Center, Azure Key Vault, Azure Firewall, Network Security Groups (NSGs), and Virtual Network (VNet) configurations to secure cloud environments.
• Experience designing access controls using Azure AD, managing conditional access policies, and enforcing least privilege access across cloud resources.
• Proven experience in leading or managing projects focused on security architecture or cloud security deployments.
• Skilled in conducting risk assessments of cloud architectures, identifying vulnerabilities, and implementing remediation strategies within Azure environments.
• Proven track record of collaborating with IT, DevOps, application development, and security teams to embed security controls within cloud environments.
• Ability to act as a trusted advisor to other departments on Azure security and compliance best practices.
• Detail-oriented approach to designing and implementing security controls, ensuring configurations meet exact security specifications without compromising access or usability.
• Ability to align security architecture with business objectives, balancing security requirements with operational efficiency and cost-effectiveness.

Qualifications

• Bachelor's or master's degree in information technology, Computer Science or Cyber Security related field.
• Microsoft Certified: Azure Security Engineer Associate.
• Microsoft Certified: Azure Solutions Architect Expert.
• Microsoft Certified: Identity and Access Administrator Associate.
• Certified Information Systems Security Professional (CISSP).
• Certified Cloud Security Professional (CCSP).
• Microsoft Certified: Cybersecurity Architect Expert.
• Certified Information Security Manager (CISM).
• CompTIA Cloud+.
• Certified Ethical Hacker (CEH).

One or many of these qualifications are preferred

Offer

• Fantastic new office on Yas Island.
• Opportunity to work in a growing start-up business.
• Chance to work with like-minded professionals.
• A diverse environment with a determination to reach our goals.
• Training and learning opportunities.
• Company benefits which support your health and well-being.

Interested? Do apply directly with your CV.