Full Time Cloud Engineer (Security - DevOps) Jobs, in MIMS Medica (Malaysia) Selangor - Maukerja

Who We Are:

MIMS is Asia-Pacific’s leading multi-channel provider of trusted, quality medical information, medical education, and knowledge services connecting healthcare communities. Our work empowers healthcare professionals to improve patient outcomes by facilitating knowledge exchange and better decision-making. Today, MIMS has a strong regional presence in 17 countries and regions across Asia-Pacific with approximately two million healthcare professionals subscribed to its drug & resource portal, digital and print publications. We provide solutions to leading pharmaceutical companies and established healthcare institutions across the world.

What Impact You Will Make:

A. Cybersecurity & Application Security (50%)

• Implement and maintain security controls across web applications, APIs, cloud infrastructure, and network services.
• Manage Cloudflare WAF, CDN security, bot protection, firewall rules, and rate limiting.
• Perform vulnerability scanning, security assessments, and remediation tracking.
• Monitor security events, investigate suspicious activities, and support cybersecurity incident response.
• Implement security best practices covering OWASP, API security, authentication, authorization, and data protection.
• Support identity and access management, including Microsoft Entra ID, Azure RBAC, and MFA.
• Maintain SSL/TLS certificates, secrets management, security configurations, and access permissions.
• Assist in security hardening, audit preparation, and implementation of preventive security measures.

B. Azure Cloud Infrastructure & Operations (50%)

• Maintain and support Microsoft Azure cloud infrastructure, ensuring application availability and reliability.
• Configure and troubleshoot Azure App Services, networking, application routing, and cloud resources.
• Manage DNS, subdomains, SSL/TLS certificates, Azure Front Door routing, and Cloudflare configurations.
• Monitor application performance, resource utilization, infrastructure health, and service availability.
• Troubleshoot cloud infrastructure and production application incidents.
• Support backup, disaster recovery, cloud security, and cost optimization activities.
• Handle documentation, software licensing, and cloud billing matters.

C. DevSecOps & CI/CD

• Maintain and improve CI/CD pipelines using Azure DevOps or GitHub Actions.
• Integrate automated security scanning and vulnerability checks into deployment pipelines.
• Support application deployment, environment configuration, and release troubleshooting.
• Automate recurring operational and security tasks using scripting.
• Collaborate with developers to identify and remediate application security vulnerabilities.
• Maintain infrastructure documentation, operational procedures, and incident runbooks.

What Skills and Experience You will Bring:

• Bachelor’s Degree in Computer Science, IT, Cybersecurity, or related discipline.
• 3–5 years of relevant experience in cloud infrastructure, cybersecurity, DevOps, or system administration.
• Hands-on experience managing applications and infrastructure on Microsoft Azure.
• Practical understanding of web security, networking, DNS, SSL/TLS, firewall/WAF configurations, and vulnerability management.
• Experience supporting CI/CD pipelines and application deployments.
• Good understanding of web applications, REST APIs, and cloud networking fundamentals.
• Experience troubleshooting production incidents and analyzing application/infrastructure logs.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Proactive, responsible, and willing to continuously learn new technologies.

Well versed in the following technologies:

1. Azure Cloud: Azure App Service, Storage, Azure SQL, basic networking
2. Cloud Security: Microsoft Entra ID, Azure RBAC, Key Vault, MFA
3. Web & Network Security: Cloudflare WAF/CDN, DNS, SSL/TLS, firewall rules, HTTP/HTTPS
4. DevOps & CI/CD: Azure DevOps, GitHub Actions, Git
5. Security Tools: Vulnerability scanners, OWASP fundamentals, security logging
6. Monitoring: Azure Monitor, Application Insights, Log Analytics, basic KQL
7. Automation: PowerShell, Bash, or Python

Additional Skill Sets – Strong Advantage:

• Experience configuring Azure Front Door, application routing, and custom domains.
• Familiarity with Microsoft Defender for Cloud or Microsoft Sentinel.
• Knowledge of SAST, DAST, dependency scanning, and secrets detection.
• Experience with Docker, Kubernetes, or Infrastructure as Code.
• Understanding of OAuth 2.0, OpenID Connect, SSO, and API security.
• Familiarity with Azure networking, Virtual Networks, NSGs, and Private Endpoints.
• Experience supporting production incident investigations and root cause analysis.

Good to Have:

• Exposure to healthcare, high-traffic B2C, or multi-country digital platforms.
• Knowledge of ISO 27001, NIST, or Zero Trust security principles.
• Familiarity with .NET applications, SQL Server, and Redis.
• Experience with cloud cost optimization and infrastructure monitoring.
• Basic understanding of AI/LLM application security and data privacy.
• Relevant Azure or cybersecurity certifications, such as AZ-104, AZ-500, or SC-200.

Why Work with Us:

• Be part of a healthcare digital transformation journey.
• Work on AI-powered products impacting clinicians across Asia.
• Lead innovation in search, clinical intelligence, and AI tools.

Perks You Will Enjoy:

• On top of 13th month pay, we provide annual performance-based bonus and annual salary adjustment.
• Incentive structure that rewards quality as much as quantity of work.
• Flexible time and telecommuting arrangements.