Cloud Specialist

Roles & Responsibilities

As part of cloud infrastructure team, Cloud Specialist engineer is responsibile to incorporate continuous improvement process in operations through constant monitoring, improve the operation metrics by continuous evaluation and reporting, and also optimize the capability, scalability, availability and security of the Cloud platforms to meet set requirements.
- Design, build, maintain, and enhance authentication and security services in Azure and AWS.
- Plan, coordinate, and execute infrastructure and security projects, from inception to delivery.
- Review, approve, and consult on Terraform Azure deployments submitted by other teams.
- Provide detailed solution consulting with regard to our Azure and Microsoft authentication infrastructure and related services.
- Take primary ownership of the complete lifecycle of several existing security products.
- Participate in off-hour emergency support rotation.
- Maintain the security posture, identify, and remediate vulnerabilities by using a variety of security tools, implement threat protection, and respond to security incident escalations.
- Provide overall Microsoft 365 security expertise including strong knowledge of Azure Active Directory, Microsoft cloud app security, Azure Information Protection, Data loss prevention, Information Rights Management, Intune (Conditional access/ MDM), single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security)
- Monitoring and remediation of risks events from Azure and Microsoft 365 security and compliance dashboards.
- Lead and participate in ongoing Microsoft 365 security projects and strategy discussions.
- Document Security procedures, guidelines, training material and best practices
- Deliver M365 Security related training sessions at main offices and key project sites
- Willing to learn and implement other cloud solutions like AWS, G-Cloud etc.
- Support global cyber security projects, e.g., Identity and Access Management, Data Loss Prevention (DLP), SIEM, Incident Management etc.
- **Proactive Customer Engagement**- Understand and support their key solutions, workloads, and priorities on Azure including regular engagement on trend analysis, proactive monitoring, and event planning.
- **Strategic Project Execution -**Own project-level Azure issues and actively drive them towards resolution whilst ensuring support and engineering readiness for key milestones.
- **Critical Problem Resolution -**Lead Azure Support to drive fast mitigation of issues impacting critical workloads and provide timely communication in a 24x7x365 global support environment.
- **Case Ownership -**Directly own a subset of customer support cases from end to end. Deliver a great customer support experience. Continuously grow Azure technical skills.
- **RCA Ownership -**Own and drive the timely delivery of quality root cause analysis (RCA) to understand and prevent future occurrence of reported issues.
- **Engineering Engagement**- Relentlessly champion and advocate driving product feedback, feature requests to address customer pain points and improve Azure resiliency.
- **On call Responsibility**- This position will require some on-call commitment to provide 24/7 support to our strategic S500 customers
- **Excellent Communication**: Must have the ability to empathize with customers and convey confidence. Able to explain highly technical issues to varied audiences. Able to prioritize and advocate customer’s needs to the proper channels. Take ownership and work towards a resolution.
- **Customer Obsession**: Passion for customers and focus on delivering the right customer experience.
- **Growth Mindset**: Openness and ability to learn new skills and technologies in a fast-paced environment.
- Preferred to have certification such as AZ-500, CISSP, SSCP, GIAC Certified.
- **Core IaaS**: Compute, Storage, Networking, High Availability
- Data Platform and Bigdata: SQL Server, Azure SQL DB, HDInsight/Hadoop, Machine Learning, Azure Stream Analytics, Azure Data Factory / Data Bricks
- **Azure PaaS Services**: Redis Cache, Service Bus, Event Hub, Cloud Service, IoT suite, Mobile Apps, etc.
- **Identity and Authentication**: SSO/Federation, AD/Azure AD, ADFS, etc.
- **Preferred**but not required: Cosmos DB, Azure Kubernetes Service
- Experience in one or more automation languages (PowerShell, Python, C#, Open Source)