Cloud Engineer

Amphora; Dubai; On-site; AED 120,000 - 200,000; Full time

Job summary

A leading software solution provider in Dubai is seeking a skilled Cloud Engineer to manage Microsoft Azure cloud services. Responsibilities include automating resource provision, maintaining the cloud environment, and ensuring security compliance. Candidates should have 5-8 years of experience in Azure and a strong understanding of cloud migration and optimisation. The role offers FTE commitment and a dynamic work environment.

Qualifications

• 5-8 years experience in modern Azure cloud environment.
• Experience in cloud migration, management, and optimisation.

Responsibilities

• Manage the infrastructure layer including cloud services for Microsoft Azure.
• Deliver automation of cloud resource provision through IAC solutions.
• Contribute to security support through control operation and vulnerability resolution.

Skills

Microsoft Azure

Terraform

Docker

Kubernetes

Communication Skills

Self-motivated

Tools

Microsoft DevOps

Azure VPN/Bastion

M365

Job description

Role:

Cloud Engineer [FTE]

Location:

Dubai, UAE

Amphora Software FZCO is the premier software solution provider for energy trading, logistics and risk management in the global crude oil, refined products and energy derivatives marketplace. Our team includes some of the most experienced software designers, developers and business analysts in the commodities industry today. Since our inception, our main goal has been to provide the trading community with the most robust, user-friendly, enterprise-wide software package available. We continue to launch new products that address customers’ needs and adjust to dynamic market demands.

Reports to:

Direct report to Head of DevOps

Role purpose:

100% FTE allocation to management of the infrastructure layer including all cloud services for the company Microsoft Azure. Fulfil approved requests for changes in configuration, access permissions and service provisioning. Maintain the cloud environment at all times in accordance with company policies, standards and procedures. Deliver automation of cloud resource provision through IAC solutions (Terraform) initially and Kubernetes (AKS) later. Facilitate security support through control operation, identification and resolution of vulnerabilities and contribute to a high standard to governance. Manage end to end cost optimisation of Microsoft billing implementing recommendations, designing and executing cost conservation initiatives and reporting results to the executive and AP team.

Technical Roles and Responsibilities:

SFIA alignment: ITMG-L5 | ITOP-L2 | SYSP-L4 | HSIN-L2 | CFMG -L4 | SCAD-L5

• Provides detailed and specific advice regarding the application of their specialism to the organisation's planning and operations.
• Takes responsibility for managing the design, procurement, installation, upgrading, operation, control, maintenance and effective use of specific technology services.
• Leads the delivery of services, ensuring that agreed service levels, security requirements and other quality standards are met. Ensures adherence to relevant policies and procedures.
• Ensures that processes and practices are aligned across teams and providers to operate effectively and efficiently.
• Monitors the performance of technology services. Provides appropriate status and other reports to managers and senior users.
• Carries out routine operational procedures, including the execution of specified automation tools/scripts.
• Amends existing automation tasks under supervision to gain a basic understanding of the scripting language/automation tools.
• Contributes to maintenance and installation. Monitors and reports on infrastructure performance to enable service delivery. Resolves issues or refers to others for assistance.
• Monitors system software metrics and adjusts configurations for optimum availability and performance.
• Reviews system software updates and identifies those that merit action.
• Configures system software for required functionality and performance.
• Investigates and resolves system software problems, requesting action from supplier if required.
• Installs or removes system components using supplied installation instructions and tools.
• Conducts standard tests and contributes to investigations of problems and faults.
• Confirms the correct working of installations.
• Documents results in accordance with agreed procedures.
• Proposes and agrees the configuration items (CIs) to be uniquely identified with naming conventions.
• Puts in place operational processes for secure configuration, classification and management of CIs, and for verifying and auditing configuration records.
• Develops, configures and maintains tools (including automation) to identify, track, log and maintain accurate, complete and current information.
• Reports on the status of configuration management. Identifies problems and issues and recommend corrective actions.
• Monitors the application and compliance of security operations procedures.
• Reviews actual or potential security breaches and vulnerabilities and ensures that they are promptly and thoroughly investigated. Recommends actions and appropriate control improvements.
• Ensures that security records are accurate and complete and that requests for support are dealt with according to agreed procedures.
• Contributes to the creation and maintenance of policy, standards, procedures and documentation for security.

Other Roles and Responsibilities:

• Adherence to the company ITSM practice by following mandated practices and patterns.
• Contribution to security.
• Accounting for personal daily time and attendance.
• Such tasks as the Company may reasonably request from time to time.

Technical Experience and Expertise:

A broad range of technology knowledge to appropriate level of competency/qualification including but not limited to:

• Microsoft Azure EntraID including best practice framework
• Microsoft Azure VPN/Bastion/CLI/RD Web Gateway
• Microsoft Azure firewall, virtual networking
• Microsoft Azure DevOps (build, test, deploy) pipelines (with self-hosted agency)
• Microsoft Windows Defender EPP
• Microsoft Windows Server
• Microsoft Exchange, Teams, Sharepoint, M365
• Microsoft InTune
• Microsoft Cloud Security services and toolsets (ATP, ASR, DLP)
• Microsoft IAM (PIM, Conditional Access, EntraID tokens, MFA, RBAC, JIT)
• Terraform IAC, Docker, Kubernetes
• Microsoft Backup & Recovery (RSV)
• Logging, audit reporting, performance and cost management, cloud control toolsets
• Freshdesk FreshService
• 1Password password manager

Skill Set:

• Be self-motivated, proactive with thoroughness and attention to detail in communication, documentation etc. without assumption.
• Strategic and analytical thinking with ability to grasp internal and external customer requirements.
• Ability to conceptualize solutions and present ideas to management and stakeholders
• Great communication and negotiations with the ability to be proactive in adapting to technology needs and requirements.
• Organization and time management.
• Excellent written and verbal communication skills with the ability to prepare and eventually deliver presentations to audiences, demonstrating knowledge of domain and technology.
• Strong moral compass and strength to prevent breach of company policies, standards and procedures (eg: granting unapproved access) in the face of pressure to fulfil business demands.

Experiential Requirements:

• 5-8 years experience in modern Azure cloud environment ideally within the context of a software engineering company.
• Demonstrable success in cloud migration, management and optimisation in a dynamic and increasingly automated deployment.