Cloud DevOps Engineer

KEY RESPONSIBILITIES

•    Design, build, and operate Azure landing zones for Fast Track experimentation and Production-grade workloads, including management groups, subscriptions, policy, RBAC, networking, and security guardrails.
•    Implement hub-spoke networking, Private Link, firewall, NSGs, Defender for Cloud, Azure Policy, and cost governance aligned to sovereign and regulated cloud requirements.
•    Create self-service sandbox templates with auto-expiry, policy controls, cost visibility, and clear graduation paths into staging and production.
•    Build CI/CD pipelines for applications, agents, infrastructure-as-code, and deployment environments using Azure DevOps or GitHub Actions.
•    Implement environment promotion from sandbox to staging to production with gate hooks, approvals, rollback, agent/model versioning, and auditability.
•    Manage container build and registry workflows, ACR, AKS and/or Azure Container Apps, secrets integration with Key Vault, and secure supply-chain practices.
•    Set up observability and telemetry plumbing, including OpenTelemetry into Azure Monitor / Log Analytics, release/rollback automation, and operational dashboards.
•    Partner with governance, platform, and engineering teams to enforce controls mechanically without slowing down safe experimentation.

KEY REQUIREMENTS

•    Hands-on Azure cloud engineering experience, including landing zones, Cloud Adoption Framework, subscriptions, RBAC, networking, Private Link, Azure Policy, and Defender for Cloud.
•    Strong infrastructure-as-code experience with Bicep and/or Terraform, with disciplined source control and environment management practices.
•    Experience with Azure DevOps and/or GitHub Actions, CI/CD pipeline design, deployment automation, release management, and rollback planning.
•    Experience with containers, ACR, AKS and/or Container Apps, Key Vault, secrets management, workload identity, and secure deployment patterns.
•    Good understanding of MLOps/LLMOps or agent-ops concepts, including artifact/version registries, deployment gates, eval-in-pipeline patterns, and model/prompt versioning.
•    Ability to work in regulated or security-conscious environments where residency, auditability, cost control, and operational reliability matter.
•    Strong troubleshooting mindset across infrastructure, networking, identity, pipelines, and application runtime layers.

PREFERRED QUALIFICATIONS

•    Experience with sovereign or government cloud environments, including UAE-based Azure regions and Core42/G42 constructs where applicable.
•    Policy-as-code exposure, GitOps practices, MLflow, Azure ML, Azure AI Foundry registry, or comparable registry tooling.
•    Experience supporting AI, agentic systems, or data-intensive workloads in production.
•    Familiarity with SRE practices, SLOs, incident management, DR/BCP, run-cost optimisation, and security-by-design operations.
•    Arabic language capability or experience supporting public-sector technology programs in the region.

TECH STACK / TOOLS

Azure UAE North/Central - Core42/G42 - Bicep - Terraform - Entra - Azure Policy - Private Link - Defender - Azure DevOps - GitHub Actions - ACR - AKS - Container Apps - Key Vault - OpenTelemetry

FIRST 90 DAYS SUCCESS

•    Production landing zone and Fast Track sandbox template are live with residency, security, and cost guardrails enforced.
•    CI/CD pipelines are green for core app, agent, and infrastructure deployments.
•    Promotion and rollback paths are demonstrated with versioned, auditable artefacts across environments.
 
 
This role is not. An app or agent builder. This role provides the secure ground, automation, and release mechanics that app and AI engineers build on.