Senior DevOps Engineer

Bespin Global MEA, an e& enterprise company; Abu Dhabi; On-site; AED 250,000 - 380,000; Full time

Job summary

Bespin Global MEA, an e& enterprise company, is seeking an experienced Azure Infrastructure Engineer in Abu Dhabi to design, implement, and operate secure, scalable cloud infrastructure for enterprise platforms and AI workloads. You will manage IaC, deployment automation, and ongoing operations to ensure reliability and security.

Responsibilities include building landing zones, executing migrations, engineering identity access, and maintaining observability with dashboards and runbooks, while

Qualifications

• 7+ years in infrastructure or platform engineering; 3+ years Azure at enterprise scale.
• IaC as default: Bicep preferred; Terraform acceptable; Git workflows; avoid portal changes.
• Deep Azure networking: hub-and-spoke, firewall rules, private endpoints, VPN/ExpressRoute.
• Identity engineering: Entra ID, SAML/OIDC, PIM, RBAC, managed identities.
• Scripting fluency: PowerShell required; Python a plus; REST APIs familiarity.
• Migration experience: datacenter-to-cloud or tenant migrations with DB moves.
• SQL Server knowledge: backups, authentication, AGs; not DBA depth.
• Clear written communication: PR descriptions, design docs, runbooks.

Responsibilities

• Build the landing zone: design and deliver spoke networks, firewall policy, private DNS, App Gateway/WAF, shared platform services; deploy via Azure DevOps pipelines.
• Execute migrations: plan and run app migrations, SQL Server moves, data transfers, cutovers with rollback plans.
• Engineer identity and access: Entra ID auth, SSO/SAML for onboarded entities, PIM just-in-time access, managed identities.
• Keep it observable and operable: diagnostic settings, Log Analytics, Grafana dashboards, alert rules, runbooks.
• Hold the security line: private-endpoints-only PaaS, forced-tunnel egress, zero-trust access from Cloud PCs, policy guardrails.
• Operate what you build: triage incidents using firewall logs and KQL, participate in change reviews, document designs.

Skills

Azure infrastructure

Cloud networking

PowerShell

Python

IaC / CI/CD

REST APIs

Security & zero-trust

Documentation

Education

Bachelor's degree in Computer Science or related field

Tools

Bicep

Terraform

Azure DevOps

GitHub pipelines

Grafana

Log Analytics

Job description

Job Purpose:

The role is responsible for designing, implementing, and operating secure and scalable Azure cloud infrastructure supporting enterprise platforms and AI workloads. The position follows an end-to-end engineering approach, covering infrastructure-as-code, deployment automation, validation, and ongoing operations, while ensuring platform reliability, security, and continuous improvement.

Job Accountabilities:

Build the landing zone: design and deliver spoke networks, firewall policy, private DNS, ingress (App Gateway/WAF), and shared platform services in Bicep, deployed through Azure DevOps pipelines with deployment stacks and evidence gates.

Execute migrations: plan and run application migration waves - fresh-build targets, SQL Server database moves (backup/restore, log shipping, AlwaysOn AGs on Azure VMs), file-share and data transfers over controlled paths, cutovers with parallel-run and rollback plans.

Engineer identity and access: Entra ID authentication (SSO/SAML for onboarded entities), PIM based just-in-time access models, managed identities everywhere, entitlement management as code.

Keep it observable and operable: diagnostic settings, Log Analytics, Grafana dashboards, alert rules, smoke-test pipelines, and operational runbooks as part of every deliverable - not as an afterthought.

Hold the security line: private-endpoints-only PaaS, forced-tunnel egress through central firewall, zero-trust access from managed Cloud PCs, Azure Policy guardrails - and the discipline to work within them (and improve them) rather than around them.

Operate what you build: triage platform incidents using firewall logs, KQL, and activity logs; participate in change reviews; document designs and procedures in the team's standards structure.

Job Specification:

7+ years in infrastructureor platform engineering, with 3+ years hands on Azure at enterprise scale.

Infrastructure as code as your default working mode- Bicep strongly preferred (Terraform acceptable), Git branching/PR workflows, Azure DevOps or GitHub pipelines. You should be uncomfortable making portal changes.

Deep Azure networking: hub-and-spoke, Azure Firewall rules and policy, UDRs, private endpoints and Private DNS, VPN/ExpressRoute, Application Gateway/WAF.

Identity engineering: Entra ID, SAML/OIDC federation, PIM, RBAC design, managed identities, Microsoft Graph scripting.

Scripting fluency: PowerShell required; Python a plus. Comfortable with REST APIs when the CLI falls short.

Migration experience: at least one substantial datacenter-to-cloud or tenant-to-tenant migration programme, including database moves and cutover planning.

Working SQL Server knowledge (senior roles): backup/restore mechanics, authentication models, availability groups - enough to move and stand up databases confidently, not DBA depth.

Clear written communication: PR descriptions, design docs, and runbooks are first-class deliverables in this team.