Senior Site Reliability Engineer

About JiBe
JiBe is a cloud based fully integrated ERP system for the shipping industry. Our goal is to allow shipping companies to improve productivity, efficiency and safety levels, while reducing costs. JiBe ERP enables increased automation and streamlining of processes, creating pre-defined workflows and reducing the usage of email and paper.
For this role JiBe requires a hands-on engineer operating at the intersection of IT operations, Site Reliability Engineering, and security engineering. The environment is Azure-first and automation-first, with AWS as a secondary cloud. You will build and run reliable, secure, automated infrastructure for a multi-client organization — owning the systems day to day rather than directing others to. Priorities, in order: Azure depth, an automation-first instinct, hands-on security engineering, and reliability ownership. AWS, formal compliance ownership, and team leadership are not the focus of this role.
Job Responsibilities
Site Reliability Engineering
Define and track SLOs/SLIs and error budgets for core services (Microsoft 365, internal applications, and client-facing platforms).
Build observability — metrics, logging, tracing, alerting, and dashboards (Azure Monitor, Log Analytics).
Lead reliability-focused incident response: detection, mitigation, blameless postmortems, and the follow-up automation that prevents recurrence.
Systematically reduce operational toil through automation; own platform capacity and performance.
Automation & Infrastructure as Code
Author and maintain infrastructure as code (Pulumi, Terraform, or ARM) for Azure and for AWS where used.
Build automation in PowerShell, Bash, and Python - integrate with Microsoft Graph and cloud provider APIs.
Own CI/CD pipelines in Azure DevOps- apply config-as-code and policy-as-code.
Automate provisioning, patching, identity lifecycle (joiner-mover-leaver), and routine security operations.
Hands-On Security Engineering
Implement and operate cloud security controls: Microsoft Defender (for Cloud and Endpoint), Microsoft Sentinel, Entra ID Conditional Access, Intune compliance, Key Vault, encryption, and network segmentation.
Run vulnerability management and remediation; prioritize by business impact and coordinate patching with reliability work.
Enforce least-privilege and zero-trust access (RBAC, PIM, privileged account management).
Build detections, harden configurations, and automate response with SOAR-style runbooks.
Cloud Platform — Azure/AWS
Azure - Entra ID, Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, networking, and Intune, landing-zone hygiene and cloud security posture management.
AWS - IAM, GuardDuty, CloudTrail, Security Hub, and KMS for secondary workloads; maintain consistent posture and monitoring across both clouds.
Integrate network security tooling (FortiGate and FortiClient EMS) with cloud and endpoint controls.
IT & Endpoint / Identity Operations
Hands-on Microsoft 365 administration (Exchange, Teams, SharePoint, Intune, Entra ID).
Endpoint management and compliance; automated identity lifecycle across a multi-client / multi-tenant estate.
Compliance Support
Implement and evidence the technical controls that support the organization’s security compliance and audit requirements across frameworks such as ISO 27001, SOC 2, and GDPR.
Produce technical evidence for audits and automate evidence collection where possible.
Support the compliance program with engineering; this role does not own governance or certification.
Qualifications
Technical Skills
Cloud Platforms:
Strong, hands-on Azure across identity, security, networking, and governance — must-have.
Knowledge of AWS security - IAM, GuardDuty, CloudTrail, Security Hub, and KMS.
Automation & Infrastructure as Code:
PowerShell and/or Python, Pulumi or Terraform, Azure DevOps CI/CD, Microsoft Graph.
An automation-first mindset — codifying and scripting by default rather than working manually.
Security Engineering:
Microsoft Defender, Microsoft Sentinel, and Entra ID with Conditional Access and PIM.
Least-privilege and zero-trust patterns; vulnerability management and remediation.
Site Reliability & Observability:
SLOs/SLIs, alerting, and dashboards (Azure Monitor, Log Analytics).
Incident response and blameless postmortems.
Frameworks, Standards & Supporting Tools:
Familiarity with security and privacy frameworks such as ISO 27001, SOC 2, and GDPR.
Microsoft 365 and Intune administration; FortiGate / FortiClient EMS.
Exposure to Databricks, Power BI Embedded, or Microsoft Foundry is an advantage.
Soft Skills
Strong problem-solving and ownership; comfortable carrying reliability for systems they build.
Clear written and verbal communication; effective across IT, security, and the business.
Manages competing priorities with attention to detail.
Written and Verbal English communication is a must.
Certifications (Preferred)
Azure-aligned and most relevant: AZ-104, AZ-500, SC-200, SC-300.
AWS Certified Security – Specialty is desirable, given the secondary cloud.
HashiCorp Terraform Associate is a plus.
CISSP or CISM are welcome but signal a governance/management profile rather than the hands-on engineering profile this role targets.

Work arrangement
No