ICT Officer (Cloud SecOps Engineer)

About the role

IOM is looking for an ICT Officer (Cloud SecOps Engineer) to lead and evolve the cloud security architecture and operations of the organization. The role ensures the security, integrity and compliance of IOM's cloud infrastructure, primarily Azure with multi-cloud awareness, focusing on threat detection, incident response, security automation and hardening of cloud environments supporting IOM's global offices. The post reports to the Chief Technology Officer and the Senior ICT Officer (Cloud Services).

Key responsibilities

• Implement 24/7 monitoring with Microsoft Sentinel, Defender for Cloud and Azure Monitor, and maintain data loss prevention controls.
• Investigate and remediate security incidents (breaches, malware, DDoS) with root-cause analysis, and define incident detection workflows and playbooks.
• Enforce Zero Trust via Azure AD Conditional Access, PIM and RBAC, and audit service principals and privileged access.
• Ensure compliance with GDPR, ISO 27001, NIST and CIS Benchmarks, run vulnerability scans and patch management, and automate compliance checks with Azure Policy and Blueprints.
• Embed security in CI/CD pipelines (Azure DevOps, GitHub Actions), scan IaC templates (Terraform, Bicep, ARM) and integrate security checks.
• Develop KQL queries in Sentinel, automate responses with Azure Logic Apps and Functions, and hunt for potential threats.
• Collaborate with cloud operations, development and information security teams, train them on cloud security best practices, and coordinate on cost optimization.

Required profile

• Master's degree in Cybersecurity, Computer Engineering, Computer Science or a related field with five years of relevant experience, or a university degree with seven years.
• Minimum 5 years of experience in Cloud SecOps engineering.
• Fluency in English; working knowledge of an official UN language is an advantage.
• Applicants must be mobile if recruited internationally, and must obtain all clearances (medical, security, accreditation, visa/residency as applicable).

Required skills

• Certifications: Microsoft Certified: Azure Security Engineer Associate and Azure Fundamentals; ITIL 4 Foundation and CSSP within 6 months; CISSP is an advantage; AWS Certified Security Specialist is an added advantage.
• Hands-on Azure (Sentinel, Defender for Cloud, Key Vault, Azure Firewall) and AWS; Terraform, CloudFormation or Ansible; CI/CD tools such as Jenkins, GitHub Actions and Azure DevOps.
• Scripting in Python, Bash or PowerShell; Docker and Kubernetes; familiarity with LogicMonitor, Prometheus or CloudWatch.
• Knowledge of frameworks such as NIST CSF, MITRE ATT&CK and ITIL/ITSM, and of Azure AD, VPN, VPC and encryption standards.