Cloud & Security Engineer

We are looking for a Cloud & Security Engineer, a hands-on technical role responsible for building, operating, and securing the company's Azure cloud infrastructure across national operations spanning Luzon, Visayas, and Mindanao. This role is responsible for cloud provisioning, configuration, monitoring, and the implementation of security controls for platforms that support 24/7 food distribution operations, including SAP ECC, Warehouse Management Systems (WMS), Transport Management Systems (TMS), and Point-of-Sale (POS) systems.

Key Responsibilities:

• Provision, configure, maintain, and monitor Azure infrastructure, including VMs, storage, networking, backup, high-availability (HA), disaster recovery (DR), and SAP ECC 6.0 migration activities in alignment with architecture standards.
• Implement and maintain security controls across on-premise, cloud, and edge environments, including Zero Trust controls, IAM, security baselines, Azure Defender, Microsoft Sentinel, Conditional Access, Privileged Identity Management (PIM), and network security groups.
• Monitor infrastructure and security events, respond to incidents and on-call escalations, perform root cause analysis (RCA), execute BCP/DR procedures, and remediate vulnerabilities within established timelines.
• Support SAP ECC security and access management through role-based access reviews, Segregation of Duties (SoD) monitoring, audit log reviews, and maintenance of endpoint protection, email security, and DLP solutions.
• Apply governance, compliance, and documentation standards while collaborating with architects, application owners, vendors, MSSPs, and testing partners to ensure secure, compliant, and operationally effective infrastructure and security services.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• Minimum 3 years of IT infrastructure, cloud engineering, or information security experience.
• Hands-on experience with Microsoft Azure administration and/or security monitoring or incident response in a production environment.
• Exposure to enterprise ERP environments (SAP preferred) or 24/7 production support is an advantage.
• Working knowledge of Microsoft Azure (IaaS, PaaS, Azure Site Recovery, Azure Backup, Azure Monitor) and core Azure security services (Defender for Cloud, Sentinel, Conditional Access, Key Vault).
• Familiarity with SAP on-cloud infrastructure requirements and basic SAP security concepts (role design, SoD, audit log review).
• Basic understanding of network architecture, VPN, hybrid cloud connectivity, and network security tools (firewall policy, IDS/IPS).
• Experience with infrastructure and security monitoring platforms, particularly Zabbix and SIEM tools; familiarity with ITSM tools such as Freshservice or ServiceNow.
• Scripting and automation exposure (PowerShell, Azure CLI, or equivalent IaC tools).
• Willingness to report 100% onsite in Banawe, Quezon City.