Cloud Engineer (Security & DevOps)

MIMS Medica (Malaysia) Sdn Bhd; Petaling Jaya; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

13th month pay

Annual performance-based bonus

Flexible time and telecommuting

Job summary

MIMS is seeking an experienced Cybersecurity & DevSecOps professional to safeguard our Azure cloud apps and APIs while optimizing CI/CD pipelines. You will manage cloud security, DNS, routing, and certificate handling, and partner with developers to remediate vulnerabilities in a fast-paced healthcare digital platform.

Ideal candidates have 3–5 years of hands-on Azure experience, strong web security knowledge, and a collaborative mindset to support production deployments and incident response.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3–5 years of cloud infrastructure, cybersecurity, DevOps, or system administration experience.
• Hands-on experience managing Azure-based apps and infra.
• Understanding of web security, DNS, SSL/TLS, firewall/WAF configurations.

Responsibilities

• Implement and maintain security controls across web apps, APIs, and cloud infra.
• Maintain Azure cloud infrastructure, app services, DNS, routing, and certificates.
• Maintain and improve CI/CD pipelines and integrate security checks.
• Collaborate with developers to remediate security vulnerabilities and document procedures.

Skills

Azure management

Web security

CI/CD pipelines

Communication

Cloud networking

Education

Bachelor’s Degree in Computer Science, IT, Cybersecurity

Tools

Docker

Kubernetes

Job description

MIMS is Asia-Pacific’s leading multi-channel provider of trusted, quality medical information, medical education, and knowledge services connecting healthcare communities. Our work empowers healthcare professionals to improve patient outcomes by facilitating knowledge exchange and better decision‑making. Today, MIMS has a strong regional presence in 17 countries and regions across Asia-Pacific with approximately two million healthcare professionals subscribed to its drug & resource portal, digital and print publications. We provide solutions to leading pharmaceutical companies and established healthcare institutions across the world.

What Impact You Will Make:

A. Cybersecurity & Application Security (50%)

• Implement and maintain security controls across web applications, APIs, cloud infrastructure, and network services.
• Manage Cloudflare WAF, CDN security, bot protection, firewall rules, and rate limiting.
• Perform vulnerability scanning, security assessments, and remediation tracking.
• Monitor security events, investigate suspicious activities, and support cybersecurity incident response.
• Implement security best practices covering OWASP, API security, authentication, authorization, and data protection.
• Support identity and access management, including Microsoft Entra ID, Azure RBAC, and MFA.
• Maintain SSL/TLS certificates, secrets management, security configurations, and access permissions.
• Assist in security hardening, audit preparation, and implementation of preventive security measures.

B. Azure Cloud Infrastructure & Operations (50%)

• Maintain and support Microsoft Azure cloud infrastructure, ensuring application availability and reliability.
• Configure and troubleshoot Azure App Services, networking, application routing, and cloud resources.
• Manage DNS, subdomains, SSL/TLS certificates, Azure Front Door routing, and Cloudflare configurations.
• Monitor application performance, resource utilization, infrastructure health, and service availability.
• Troubleshoot cloud infrastructure and production application incidents.
• Support backup, disaster recovery, cloud security, and cost optimization activities.
• Handle documentation, software licensing, and cloud billing matters.

C. DevSecOps & CI/CD

• Maintain and improve CI/CD pipelines using Azure DevOps or GitHub Actions.
• Integrate automated security scanning and vulnerability checks into deployment pipelines.
• Support application deployment, environment configuration, and release troubleshooting.
• Automate recurring operational and security tasks using scripting.
• Collaborate with developers to identify and remediate application security vulnerabilities.
• Maintain infrastructure documentation, operational procedures, and incident runbooks.

What Skills and Experience You will Bring:

• Bachelor’s Degree in Computer Science, IT, Cybersecurity, or related discipline.
• 3–5 years of relevant experience in cloud infrastructure, cybersecurity, DevOps, or system administration.
• Hands‑on experience managing applications and infrastructure on Microsoft Azure.
• Practical understanding of web security, networking, DNS, SSL/TLS, firewall/WAF configurations, and vulnerability management.
• Experience supporting CI/CD pipelines and application deployments.
• Good understanding of web applications, REST APIs, and cloud networking fundamentals.
• Experience troubleshooting production incidents and analyzing application/infrastructure logs.
• Strong analytical, problem‑solving, communication, and collaboration skills.
• Proactive, responsible, and willing to continuously learn new technologies.

Well versed in the following technologies:

• Web & Network Security: Cloudflare WAF/CDN, DNS, SSL/TLS, firewall rules, HTTP/HTTPS
• Security Tools: Vulnerability scanners, OWASP fundamentals, security logging
• Automation: PowerShell, Bash, or Python

Additional Skill Sets – Strong Advantage:

• Experience configuring Azure Front Door, application routing, and custom domains.
• Familiarity with Microsoft Defender for Cloud or Microsoft Sentinel.
• Knowledge of SAST, DAST, dependency scanning, and secrets detection.
• Experience with Docker, Kubernetes, or Infrastructure as Code.
• Understanding of OAuth 2.0, OpenID Connect, SSO, and API security.
• Familiarity with Azure networking, Virtual Networks, NSGs, and Private Endpoints.
• Experience supporting production incident investigations and root cause analysis.

Good to Have:

• Exposure to healthcare, high‑traffic B2C, or multi‑country digital platforms.
• Knowledge of ISO 27001, NIST, or Zero Trust security principles.
• Familiarity with .NET applications, SQL Server, and Redis.
• Experience with cloud cost optimization and infrastructure monitoring.
• Basic understanding of AI/LLM application security and data privacy.
• Relevant Azure or cybersecurity certifications, such as AZ-104, AZ-500, or SC-200.

Why Work with Us:

• Be part of a healthcare digital transformation journey.
• Work on AI-powered products impacting clinicians across Asia.
• Lead innovation in search, clinical intelligence, and AI tools.
• On top of 13th month pay, we provide annual performance‑based bonus and annual salary adjustment.
• Incentive structure that rewards quality as much as quantity of work.
• Flexible time and telecommuting arrangements.