Cloud Administrator- KSA

Diyar United Company; Dammam; On-site; SAR 150,000 - 200,000; Full time

Job summary

A leading IT recruitment firm is seeking a Resourcing Specialist in Dammam, Saudi Arabia. The role involves managing cloud infrastructure and security, administering user identities, and ensuring compliance with policies across various platforms. Candidates should have strong experience in cloud management and security practices. Competitive compensation is offered.

Qualifications

• Proven experience in managing cloud services across multiple platforms.
• Strong knowledge of security practices and compliance requirements.
• Experience with identity management systems and device compliance.

Responsibilities

• Design and maintain cloud infrastructures, including tenancies and subnets.
• Administer identity and access management systems.
• Implement security policies and procedures for cloud environments.
• Configure monitoring and alerts for cloud resources.

Skills

Cloud infrastructure management

Security configuration

Identity and access management

Cross-cloud connectivity

Device management

Job description

Resourcing Specialist @ Diyar United Company | IT Recruitment

Key Responsibilities:

• OCI: Design and maintain tenancies, compartments, VCNs, subnets, DRGs, gateways, NSGs/security lists; manage Compute, Block/File/Object Storage, Load Balancers, DNS, WAF, Autonomous DB/DB Systems.
• Implement tagging/governance (OCI policies/quotas; Azure Policy/Blueprints) and landing zone standards.
• Entra ID (Azure AD): Administer tenants, users, groups, roles, conditional access, PIM, enterprise apps, app registrations, SCIM provisioning; configure SAML/OIDC for SSO to SaaS and custom apps.
• Integrations: Set up SSO/federation between Entra ID and OCI (SAML/OIDC), enable SCIM or Just‑In‑Time provisioning, manage MDM/MAM conditional access with Intune device compliance.
• Secrets and keys: Manage OCI KMS vaults/keys and Azure Key Vault; rotate secrets/certificates.
• Security posture: Configure OCI Cloud Guard, Security Zones, Vulnerability Scanning; Azure Defender/Microsoft Defender for Cloud, Azure Security Center, Microsoft Sentinel or SIEM integrations; enforce least privilege and segmentation.
• Logging/auditing: Enable and monitor OCI Audit/Logging/Logging Analytics; Azure Monitor, Activity Logs, Log Analytics, Diagnostic Settings.
• Manage Windows/macOS/iOS/Android device enrollment, compliance, and configuration profiles via Intune.
• Deploy and manage applications, updates, Windows Autopilot, BitLocker, and remediation scripts.
• Integrate device compliance with Entra ID Conditional Access and SSO policies.
• OCI: Hybrid connectivity via DRG, IPsec, FastConnect; routing/BGP and HA design.
• Cross‑cloud: Design secure interconnect patterns (e.g., on‑prem ↔ OCI/Azure, or OCI ↔ Azure) and DNS resolution strategies; configure load balancing (L4/L7) and WAF.
• Configure Monitoring/Alerts in OCI (Monitoring, Alarms, Events) and Azure (Monitor, Alerts, Action Groups).

Execute backups, snapshots, replication, and DR across regions/clouds; test failover/failback.