Senior Cloud & Application Modernization Engineer

CyberGate Defense is seeking a Senior Cloud & Application Modernization Engineer to lead secure scalable transformation of legacy systems into modern cloud-native architectures across multi-cloud environmentswith strategic emphasis on AWS Oracle Cloud and Microsoft Azure.

The ideal candidate will combine expertise in containerization (Docker/Kubernetes) SharePoint development API-driven integrations and cloud security to accelerate digital transformation initiatives. This role moves beyond traditional DLP and MDM focusing instead on modern application delivery secure DevOps and resilient hybrid-cloud solutions for defense and government clients.

Key Responsibilities

1. Modernize legacy applications by refactoring containerizing (Docker) and orchestrating workloads using Kubernetes (AKS EKS OKE) across Azure AWS and Oracle Cloud.
   
2. Design develop and deploy custom SharePoint Online solutions including SPFx web parts Microsoft Graph integrations Teams embeds and secure collaboration sites.
   
3. Implement secure API architectures (REST/GraphQL) with authentication (OAuth 2.0 Entra ID AWS Cognito Oracle IDCS) rate limiting and monitoring.
   
4. Conduct multi-cloud security gap assessments aligned with ISO 27001 NIST and CIS benchmarks; deliver prioritized remediation roadmaps.
   
5. Enforce cloud-native security controls:
   
• Identity & access (Entra ID AWS IAM Oracle IAM)
  
• Network policies (NSGs Security Groups OCI NSGs)
  
• Secrets management (Azure Key Vault AWS Secrets Manager Oracle Vault)
  
• Container image scanning and runtime protection
  
6. Automate provisioning configuration and compliance using Infrastructure-as-Code (Terraform ARM CloudFormation) and scripting (Python or PowerShell).
   
7. Build custom monitoring and compliance dashboards (e.g. Power BI Grafana native cloud tools) to track application health security posture and modernization KPIs.
   
8. Embed security into CI/CD pipelines (Azure DevOps AWS Code Pipeline Oracle DevOps) with automated testing dependency checks and policy gates.
   
9. Collaborate with architects developers and compliance teams to ensure secure scalable and maintainable application designs.
   
10. Evaluate and integrate third-party services via secure API consumption and publishing patterns.
    

Mandatory Requirements

1. 68 years of experience in cloud engineering cybersecurity or application modernizationwith hands-on work across at least two of: Microsoft Azure AWS Oracle Cloud.
   
2. Proven SharePoint development expertise:
   
• Modern SharePoint Online (SPFx Microsoft Graph REST APIs)
  
• Integration with Power Platform Teams and Entra ID
  
3. Strong experience with Docker and Kubernetes:
   
• Building securing and deploying container images
  
• Managing clusters (AKS/EKS/OKE) Helm charts ingress/egress controls
  
4. Demonstrated experience in application modernization (e.g. monolith-to-microservices API-first design event-driven architectures).
   
5. Solid understanding of Zero Trust identity-centric security and data protection in cloud-native apps.
   
6. Experience performing cloud security gap assessments and delivering remediation roadmaps aligned with compliance standards.
   

Preferred Qualifications (Added Advantage)

1. Scripting & automation proficiency in Python and/or PowerShell (e.g. automating deployments log parsing API calls).
   
2. API design and integration experience:
   
• RESTful services OpenAPI/Swagger
  
• API gateways (Azure API Management AWS API Gateway Oracle API Gateway)
  
3. Relevant certifications such as:
   
• CKA / CKAD (Certified Kubernetes Administrator/Developer)
  
• AWS Certified DevOps Engineer / Security Specialist
  
• Oracle Cloud Infrastructure Architect / Security Professional
  
• Microsoft: AZ-204 (DevOps) AZ-500 (Security) SC-400 (DLP)
  
4. Familiarity with GitOps service meshes (Istio Linkerd) and observability tools (Prometheus Open Telemetry).
   
5. Knowledge of compliance frameworks (ISO 27001 NIST CSF UAE government standards) in cloud and container contexts.