Senior Azure Cloud Engineer

منذ 2 أسابيع

Abu Dhabi, Abu Dhabi Emirate, الإمارات العربية المتحدة K2 دوام كامل

• Own Azure security end to end: Microsoft Entra ID, RBAC and Privileged Identity Management, Key Vault and secrets rotation, Microsoft Defender for Cloud, Microsoft Sentinel, network segmentation, private endpoints and Azure Policy as code.
• Design and evolve the platform architecture (telematics ingestion, APIs, data stores, web portal) against the Azure Well-Architected Framework; write and maintain architecture decision records and diagrams.
• Lead performance and reliability engineering: load testing, autoscaling, caching, database tuning, and observability with Azure Monitor and Log Analytics.
• Build and maintain infrastructure as code (Bicep or Terraform) and secure CI/CD pipelines in Azure DevOps or GitHub, including security gates and dependency scanning, backup/archiving automation.
• Run vulnerability management, penetration-test remediation and incident response; keep the platform aligned with the UAE Personal Data Protection Law, the TDRA/NESA Information Assurance standard and customer security requirements.
• Receive the external consultant's knowledge transfer, then own the findings register, remediation backlog and architecture roadmap.
• Mentor developers on secure coding and cloud practices; review designs and pull requests for security and scalability.
• Produce clear documentation: runbooks, security standards, and executive-level status reports.
• Design telemetry pipeline with Azure Monitor, Application Insights, Log Analytics, Prometheus and Grafana. Must-have requirements
• 5+ years in cloud engineering or security engineering, including 3+ years hands-on on Microsoft Azure in production environments.
• Proven delivery of at least one cloud security assessment or hardening programme and at least one architecture redesign with measurable results.
• Microsoft Certified: Azure Engineer Associate, or equivalent demonstrable experience.
• Strong infrastructure-as-code and CI/CD skills; scripting in PowerShell, Bash or Python.
• Working knowledge of identity, network and data security on Azure (Entra ID, NSGs/Azure Firewall, private endpoints, encryption, Key Vault).
• Clear written and spoken English;
• Able to start within 30 days; currently in the UAE, or able to relocate on a visa we sponsor.
• Experience in setting Splunk, AppDynamics Nice to have
• SC-100 (Cybersecurity Architect Expert), CISSP, CCSP or OSCP.
• Experience with IoT, telematics, GPS or fleet management platforms, or other high-volume real-time data systems.
• Hands-on with Azure IoT Hub, Event Hubs, Cosmos DB, Azure Database for PostgreSQL or SQL Managed Instance, and Azure Kubernetes Service or App Service.
• Experience taking a product through ISO 27001 or a UAE regulatory audit.