Cloud Engineer

We are currently seeking Cloud Infrastructure Engineer for our Group’s Digital & Technology department in Dubai.

About Ghassan Aboud Holdings:

Ghassan Aboud Holdings is an international conglomerate engaged in several key business sectors including Automotive, Retail, FMCG, Hospitality, Logistics, Healthcare, and Digital Marketplaces.

Purpose of the Job

The L3 Cloud Infrastructure Engineer provides advanced support, architecture guidance, and operational excellence across cloud platforms—primarily Microsoft Azure & AWS. The role owns complex escalations, drives automation and reliability, ensures security and compliance, and delivers scalable cloud services aligned to business outcomes, SLAs, and cost efficiency.

Key Responsibilities:

Cloud Architecture & Platform Engineering

• Design, implement, and optimize Azure landing zones, hub-spoke networking, management groups, and policy-based governance (Azure Policy, Blueprints).
• Build secure, scalable foundations for AKS, App Services, Azure Functions, Azure SQL/Managed Instance, Storage, AVD, and PaaS services.
• Partner with Enterprise Architecture to produce HLD/LLD and technical roadmaps (modernization, containerization, data platform evolution).

Operations, Reliability & Incident Management

• Own L3 incident/problem management for cloud workloads; perform RCA and permanent fixes; contribute to SRE-style error budgets and SLIs/SLOs.
• Lead performance tuning, capacity planning, patching pipelines, break-fix, and complex change requests.
• Participate in on-call rotation and major incident handling, collaborating with the Incident Coordinator and IRT

Security, Compliance & Governance

• Implement and maintain Zero Trust principles, MFA/Conditional Access, Privileged Identity Management (PIM), and least privilege in Azure AD/Microsoft Entra ID.
• Enforce and remediate using Defender for Cloud, Sentinel, Key Vault, Managed Identities, Policies/Initiatives, and secure baselines.
• Align operations to NIST CSF (Identify–Protect–Detect–Respond–Recover) and support audits, evidence collection, vulnerability remediation, and CIS benchmarks
• Engineer and support Azure networking (VNets, vWAN, Private Link/Endpoints, Application Gateway/WAF, Front Door, Azure Firewall, NSGs/ASGs).
• Maintain hybrid connectivity (ExpressRoute/VPN), private DNS, routing, load balancing, and end-to-end TLS.
• Design and test BCP/DR for cloud workloads (Azure Site Recovery, Backup vaults, zone/region redundancy, RTO/RPO adherence).
• Implement immutable backups, key rotation, and secure secrets handling.

Observability & Telemetry

• Build actionable monitoring using Azure Monitor, Log Analytics, Application Insights, and custom dashboards/alerts.
• Establish runbooks for proactive detection, trend analysis, and capacity forecasting.

Collaboration & Knowledge

• Provide L3 mentorship to L1/L2; contribute to KBs, SOPs, runbooks, and game days.
• Work closely with Security, Networking, Apps, and Data teams to ensure end-to-end service quality.

Required Experience & Qualifications

Bachelor’s in computer science/engineering or equivalent experience.

Certification:

Microsoft: Azure Administrator Associate (AZ 104), Azure Solutions Architect Expert (AZ 305), Azure Security Engineer (AZ 500).

ITIL Foundation.

AWS SysOps /Admin certifications are a plus.

At least 6-7 Years Experience as an IT L2/L3 engineer, 5+ years in Infrastructure/Cloud roles with 3+ years focused on Azure engineering/operations.

Proven track record managing production-grade cloud platforms in regulated or security-conscious environments.

Interested candidates are requested to share their updated resume.

We thank all applicants for their interest. However, only those qualified individuals who closely meet the qualifications of the position will be contacted. The details of the position are only a summary; other duties may be assigned as necessary.