K2
Technology company in Abu Dhabi pioneering robotics, mobility, and human performance.
شرح موقعیت
Own Azure security end to end: Microsoft Entra ID, RBAC and Privileged Identity Management, Key Vault and secrets rotation, Microsoft Defender for Cloud, Microsoft Sentinel, network segmentation, private endpoints and Azure Policy as code. Design and evolve the platform architecture (telematics ingestion, APIs, data stores, web portal) against the Azure Well-Architected Framework; write and maintain architecture decision records and diagrams. Lead performance and reliability engineering: load testing, autoscaling, caching, database tuning, and observability with Azure Monitor and Log Analytics. Build and maintain infrastructure as code (Bicep or Terraform) and secure CI/CD pipelines in Azure DevOps or GitHub, including security gates and dependency scanning, backup/archiving automation. Run vulnerability management, penetration-test remediation and incident response; keep the platform aligned with the UAE Personal Data Protection Law, the TDRA/NESA Information Assurance standard and customer security requirements. Receive the external consultant's knowledge transfer, then own the findings register, remediation backlog and architecture roadmap. Mentor developers on secure coding and cloud practices; review designs and pull requests for security and scalability. Produce clear documentation: runbooks, security standards, and executive-level status reports. Design telemetry pipeline with Azure Monitor, Application Insights, Log Analytics, Prometheus and Grafana. Must-have requirements 5+ years in cloud engineering or security engineering, including 3+ years hands-on on Microsoft Azure in production environments. Proven delivery of at least one cloud security assessment or hardening programme and at least one architecture redesign with measurable results. Microsoft Certified: Azure Engineer Associate, or equivalent demonstrable experience. Strong infrastructure-as-code and CI/CD skills; scripting in PowerShell, Bash or Python. Working knowledge of identity, network and data security on Azure (Entra ID, NSGs/Azure Firewall, private endpoints, encryption, Key Vault). Clear written and spoken English; Able to start within 30 days; currently in the UAE, or able to relocate on a visa we sponsor. Experience in setting Splunk, AppDynamics SC-100 (Cybersecurity Architect Expert), CISSP, CCSP or OSCP. Experience with IoT, telematics, GPS or fleet management platforms, or other high-volume real-time data systems. Hands-on with Azure IoT Hub, Event Hubs, Cosmos DB, Azure Database for PostgreSQL or SQL Managed Instance, and Azure Kubernetes Service or App Service. Experience taking a product through ISO 27001 or a UAE regulatory audit.