{bc}
Apply
linkedin

Cloud Platform Engineer (Azure)

Bespin Global MEA, an e& enterprise company
Abu Dhabi, UAE
Full-time
Mid-Senior
Onsite
Discovered 2 weeks ago
Microsoft AzureInfrastructure as codeBicepTerraformAzure DevOpsAzure networking

Full Job Posting

Role purpose

Design, implement, and operate secure, scalable Azure cloud infrastructure supporting enterprise platforms and AI workloads.

Own end-to-end engineering, including infrastructure as code, deployment automation, validation, operations, reliability, security, and continuous improvement.

Platform engineering and migration

  • Design and deliver landing-zone spoke networks, firewall policies, private DNS, Application Gateway/WAF ingress, and shared platform services.
  • Build infrastructure in Bicep and deploy through Azure DevOps pipelines with deployment stacks and evidence gates.
  • Plan and run application migration waves, including fresh-build targets and SQL Server moves using backup/restore, log shipping, and AlwaysOn AGs on Azure VMs.
  • Move file shares and data over controlled paths; plan cutovers with parallel runs and rollback plans.
  • Engineer Entra ID authentication, SSO/SAML, PIM just-in-time access, managed identities, and entitlement management as code.

Operations, observability, and security

  • Include diagnostics, Log Analytics, Grafana dashboards, alert rules, smoke-test pipelines, and operational runbooks in deliverables.
  • Enforce private-endpoints-only PaaS, central-firewall forced-tunnel egress, zero-trust access from managed Cloud PCs, and Azure Policy guardrails.
  • Triage platform incidents using firewall logs, KQL, and activity logs; participate in change reviews.
  • Document designs and procedures in the team's standards structure.

Experience and technical requirements

  • Bring 7 or more years in infrastructure or platform engineering, including at least 3 hands-on years with Azure at enterprise scale.
  • Use infrastructure as code by default; Bicep is strongly preferred and Terraform is acceptable.
  • Have Git branching and pull request workflow experience and use Azure DevOps or GitHub pipelines.
  • Know Azure hub-and-spoke networking, Firewall rules and policy, UDRs, private endpoints and DNS, VPN/ExpressRoute, and Application Gateway/WAF.
  • Have identity engineering experience with Entra ID, SAML/OIDC federation, PIM, RBAC, managed identities, and Microsoft Graph scripting.
  • PowerShell is required; Python is a plus. Be comfortable with REST APIs when the CLI falls short.
  • Have completed a substantial datacenter-to-cloud or tenant-to-tenant migration programme, including database moves and cutover planning.
  • For senior roles, have working SQL Server knowledge of backup/restore, authentication, and availability groups; DBA depth is not required.
  • Communicate clearly in pull request descriptions, design documents, and runbooks.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Bespin Global MEA, an e& enterprise company

Finance Operations Associate

, UAE

Discovered YesterdayFull-time

Senior M365 Engineer

, UAE

Discovered YesterdayFull-time

Solutions Architect (Presales)

, UAE

Discovered 2 weeks agoFull-time

Senior Solutions Sales Manager

, UAE

Discovered 1 months agoFull-time

Senior Database Administrator

, UAE

Discovered 1 months agoContract

Solutions Architect (Presales)

, UAE

Discovered 2 months agoFull-time

DevOps Engineer (Vmware Automation)

, UAE

Discovered 2 months agoFull-time