OCI Engineer

Datamatics Technologies; Riyadh Region; On-site; SAR 200,000 - 420,000; Full time

Job summary

Datamatics Technologies is seeking a Cloud Platform Engineer to own OCI-based infrastructure, automation, and security practices. You will build and operate cloud services, write IaC modules with Terraform and OCI Resource Manager, and support CI/CD pipelines across environments.

The role requires 3–6 years in cloud/platform engineering with OCI experience, plus strong scripting and monitoring skills for proactive issue resolution and cost control.

Qualifications

• Bachelor's degree in Computer Science, IT, Engineering or related field.
• 3–6 years hands-on cloud/platform engineering experience; minimum 2 years on OCI (or strong OCI exposure).
• OCI Associate certification (1Z0-1085 and 1Z0-1072 or 1Z0-1067) required; more advanced certs preferred.

Responsibilities

• Provision and configure OCI resources (Compute, Storage, VCN, LB, DBCS/ADB) per landing-zone designs.
• Configure networking (VCN/subnets/NSGs) and cost-allocation conventions.
• Support deployments via CI/CD pipelines and maintain Infrastructure-as-Code modules.

Skills

Cloud platform engineering

Automation

CI/CD practices

Security & compliance awareness

Technical communication

Education

Bachelor’s degree in Computer Science, IT, Engineering or related discipline

Tools

Terraform

Ansible

Packer

Helm

Kubernetes

OCI DevOps

Job description

JOB DESCRIPTION

Role Cloud Platform Engineer Experience 3 – 6 years
Function Cloud Platform Engineering Primary Platform Oracle Cloud Infrastructure (OCI)

He should be an Indian candidate working in KSA

1. Role Purpose
   The Cloud Platform Engineer is responsible for the day-to-day build, configuration, operation and support of cloud infrastructure services, with a primary focus on Oracle Cloud Infrastructure (OCI). The role applies approved architecture patterns, automation and operational standards to deliver secure, available and cost-efficient cloud environments. The cloud platform engineer works with limited supervision on routine to moderately complex tasks, supports senior engineers on larger initiatives, and contributes to migration, modernization and continuous-improvement activities. Working knowledge of at least one secondary public cloud (AWS, Azure or Google Cloud) and adjacent tooling such as Terraform, Kubernetes and CI/CD pipelines is expected.
2. Key Responsibilities
   Provision and configure OCI resources (Compute, Block/Object/FSS Storage, VCN, Load Balancer, DBCS, ADB) following approved designs and landing-zone patterns. Configure networking (VCN, subnets, route tables, security lists/NSGs, gateways, FastConnect/IPSec VPN, DNS) and apply standard tagging, naming and cost-allocation conventions. Support deployments and releases across environments using CI/CD pipelines (OCI DevOps, Jenkins, GitHub Actions, GitLab CI, Azure DevOps). Author and maintain Infrastructure-as-Code modules (Terraform / OCI Resource Manager) and automation scripts (Ansible, Bash, Python) for recurring tasks – patching, certificate rotation, snapshots, environment refresh. Monitor platform health and respond to alerts and incidents within SLAs using OCI Monitoring, OCI Logging, APM and enterprise tooling (Prometheus, Grafana, ELK, Datadog, Dynatrace). Execute routine operations – patching, backups, capacity checks, certificate renewals and drift remediation; participate in on-call and change windows. Apply security controls (IAM policies, MFA, OCI Vault/KMS, encryption, segmentation, Bastion) and validate guardrails using Cloud Guard, Security Zones, Vulnerability Scanning and Data Safe. Execute access management (user lifecycle, role assignment, service accounts, periodic reviews) and support audit / compliance evidence gathering. Assist with workload migration (lift-and-shift, re-platform) to OCI, environment setup and hypercare; support application teams deploying onto OCI (Oracle DB, WebLogic, OKE, Functions, API Gateway). Contribute to cost optimization (right-sizing, scheduling, unused-resource cleanup) and maintain runbooks, configuration records and operational documentation.
3. OCI-Specific Technical Skills Core Infrastructure:
   Compute (VM, BM, Flex, Pools, Autoscaling); Block / Object / Archive / FSS Storage; VCN, subnets, Security Lists vs NSGs, Route Tables, IGW/NAT/Service Gateways, DRG, Peering, FastConnect, IPSec VPN, OCI DNS, Traffic Management, LB / NLB, WAF. Identity, Security & Governance: OCI IAM – compartments, policies, groups, dynamic groups, identity domains, federation (Azure AD / Okta), instance & resource principals. Cloud Guard, Security Zones, Vault (KMS & Secrets), Vulnerability Scanning, Bastion, Data Safe, Audit. Tagging, Budgets, Quotas, Cost Analysis. Database & Data Services: DBCS, ExaCS / ExaCC (operational); Autonomous Database (ATP/ADW); MySQL HeatWave, OCI Cache (Redis), NoSQL DB (awareness); Data Pump, GoldenGate basics, Database Migration Service. Application & Developer Services: OKE (clusters, node pools, networking, upgrades); OCIR, Functions, API Gateway, Events, Notifications, Streaming, Queue; OCI DevOps (repos, build & deployment pipelines, artifacts); Resource Manager (managed Terraform), Stacks, drift detection. Observability & Operations: OCI Monitoring (metrics, alarms), Logging, Logging Analytics, Service Connector Hub, APM, OS Management Hub, Operations Insights; Block Volume backup policies, cross-region replication, Full Stack DR (awareness). Tooling & Interfaces: OCI Console, OCI CLI, OCI SDKs (Python / Java), Cloud Shell, Terraform OCI provider, REST APIs and signed requests.
4. Other Relevant Cloud & Platform Technical Skills:-
   Secondary Public Cloud: Working knowledge in at least one of AWS (EC2, S3, VPC, IAM, RDS, EKS, CloudFormation, CloudWatch), Azure (VM, Storage, VNet, Entra ID, AKS, ARM/Bicep, Monitor) or Google Cloud (GCE, GCS, VPC, IAM, GKE, Cloud Monitoring).
   Cloud Platform Engineering – Job Description
   Experienced Professional (OCI) Page 2 of 2 Classification - Public IaC & Configuration Mgmt Terraform (modules, workspaces, state, remote backends); Ansible; Packer; Helm; Git workflows and basic GitOps. Containers & Kubernetes Docker fundamentals; Kubernetes operations – Deployments, Services, Ingress, ConfigMaps, Secrets, RBAC, PVs; hands‑on with OKE, awareness of EKS/AKS/GKE. CI/CD & DevOps Pipeline authoring in OCI DevOps, Jenkins, GitHub Actions, GitLab CI, Azure DevOps; artifact management (OCIR, Artifactory, Nexus); SAST/DAST and image scanning integration. Scripting & Automation Proficient in Python, Bash or PowerShell; comfortable consuming REST APIs and parsing JSON / YAML. Observability Tooling Prometheus, Grafana, ELK / OpenSearch, Datadog, Dynatrace, Splunk – log aggregation, dashboards, alert tuning, SLO awareness. Security & Compliance Least privilege, segmentation, encryption in transit / at rest, key & secrets management; awareness of ISO 27001, SOC 2, NIST CSF, CIS Benchmarks, PCI‑DSS, GDPR. Networking & OS TCP/IP, DNS, HTTP/HTTPS, TLS, routing & firewalls; hybrid connectivity (VPN, FastConnect/ExpressRoute/Direct Connect); Linux admin (Oracle Linux, RHEL, Ubuntu) and basic Windows Server. Cost & FinOps Cloud cost drivers, OCI Universal Credits, commitments; cost analysis, budgets, tagging for chargeback / showback.
5. Qualifications, Experience & Certifications
   Bachelor’s degree in Computer Science, IT, Engineering or related discipline, or equivalent practical experience.
   3 – 6 years hands‑on cloud / platform engineering experience; minimum 2 years on OCI (or strong equivalent cloud depth with demonstrable OCI exposure); production operations and change‑management experience.
   Required (at least one OCI Associate certification): OCI Foundations Associate (1Z0-1085) plus OCI Architect Associate (1Z0-1072) or OCI Operations Associate (1Z0-1067).
   Preferred: OCI Architect Professional (1Z0-997); a second‑cloud certification (AWS SAA, Azure AZ-104, GCP ACE); HashiCorp Terraform Associate; CKA; Linux certification (RHCSA / Oracle Linux).
6. Competencies & Performance Measures Behavioural & Professional Competencies
   Ownership and accountability – sees assigned work through to completion.
   Problem solving – systematic diagnosis across infra, network and app layers.
   Clear written and verbal communication with peers and stakeholders.
   Collaboration with architecture, security, app and vendor teams.
   Service mindset and respect for operational SLAs.
   Continuous learning across cloud, automation and security.
   Discipline – adherence to standards, documentation and change control. Performance Measures
   Platform availability against SLOs on assigned services.
   Quality and timeliness of provisioning, deployment and ops work.
   Incident response effectiveness – MTTA / MTTR and RCA quality.
   Adherence to security, compliance and changemanagement standards.
   Contribution to automation, cost optimization and knowledge management.
   Demonstrable skill growth in OCI and secondary cloud / tooling areas.
   Working relationships – internal (CPE peers, Architects, Security, Networking, DBA, App teams) and external (Oracle Support, partners, vendors).