Senior Azure Cloud Engineer

• Own Azure security end to end: Microsoft Entra ID, RBAC and Privileged Identity Management, Key Vault and secrets rotation, Microsoft Defender for Cloud, Microsoft Sentinel, network segmentation, private endpoints and Azure Policy as code.

• Design and evolve the platform architecture (telematics ingestion, APIs, data stores, web portal) against the Azure Well-Architected Framework; write and maintain architecture decision records and diagrams.

• Lead performance and reliability engineering: load testing, autoscaling, caching, database tuning, and observability with Azure Monitor and Log Analytics.

• Build and maintain infrastructure as code (Bicep or Terraform) and secure CI/CD pipelines in Azure DevOps or GitHub, including security gates and dependency scanning, backup/archiving automation.

• Run vulnerability management, penetration-test remediation and incident response; keep the platform aligned with the UAE Personal Data Protection Law, the TDRA/NESA Information Assurance standard and customer security requirements.

• Receive the external consultant's knowledge transfer, then own the findings register, remediation backlog and architecture roadmap.

• Mentor developers on secure coding and cloud practices; review designs and pull requests for security and scalability.

• Produce clear documentation: runbooks, security standards, and executive-level status reports.

• Design telemetry pipeline with Azure Monitor, Application Insights, Log Analytics, Prometheus and Grafana.

Must-have requirements

• 5+ years in cloud engineering or security engineering, including 3+ years hands-on on Microsoft Azure in production environments.

• Proven delivery of at least one cloud security assessment or hardening programme and at least one architecture redesign with measurable results.

• Microsoft Certified: Azure Engineer Associate, or equivalent demonstrable experience.

• Strong infrastructure-as-code and CI/CD skills; scripting in PowerShell, Bash or Python.

• Working knowledge of identity, network and data security on Azure (Entra ID, NSGs/Azure Firewall, private endpoints, encryption, Key Vault).

• Clear written and spoken English;

• Able to start within 30 days; currently in the UAE, or able to relocate on a visa we sponsor.

• Experience in setting Splunk, AppDynamics

Nice to have

• SC-100 (Cybersecurity Architect Expert), CISSP, CCSP or OSCP.

• Experience with IoT, telematics, GPS or fleet management platforms, or other high-volume real-time data systems.

• Hands-on with Azure IoT Hub, Event Hubs, Cosmos DB, Azure Database for PostgreSQL or SQL Managed Instance, and Azure Kubernetes Service or App Service.

• Experience taking a product through ISO 27001 or a UAE regulatory audit.