Our client is a well-established organization within the financial services sector in Singapore. They are looking for a hands-on DevOps / Cloud Platform Engineer to help build, automate, and operate their Azure cloud platform through Infrastructure-as-Code and pipeline-driven delivery.
This role is suited for someone with strong Azure and Terraform experience, who can create infrastructure through code, build reusable CI/CD patterns, and support application teams in deploying securely into Azure.
Job Description
- Design, build, and maintain Terraform modules for Azure cloud infrastructure, including management groups, subscriptions, RBAC, virtual networks, firewalls, private endpoints, and shared platform services.
- Drive an Infrastructure-as-Code first approach, ensuring cloud resources are provisioned and changed through code and pipelines rather than manual portal work.
- Manage Terraform remote state, module versioning, workspaces, reusable patterns, and safe promotion across development, QA, UAT, and production environments.
- Build and maintain GitLab CI/CD or GitHub Actions pipelines for infrastructure provisioning, including validation, planning, approvals, and controlled apply processes.
- Create reusable CI/CD templates that application, data, and engineering teams can adopt for infrastructure, deployment, testing, and smoke test workflows.
- Support application and data teams in integrating their repositories with standard CI/CD templates for build, test, and deployment automation.
- Enable deployments into Azure services such as App Service, Container Apps, Azure Functions, Databricks, storage, and other cloud platform components.
- Advise application teams on suitable Azure services, infrastructure design, network patterns, and overall solution architecture for new applications.
- Integrate security checks into CI/CD pipelines, including SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and Infrastructure-as-Code scanning.
- Work with security and infrastructure teams to build secure-by-default cloud and pipeline guardrails, especially around network and infrastructure security.
- Connect infrastructure and application pipelines with monitoring and alerting tools such as Azure Monitor, Log Analytics, and Grafana.
- Contribute to platform reliability, incident response, post-incident reviews, rollback improvements, pipeline resilience, and cloud cost optimization.
- Document CI/CD standards, Terraform module usage, deployment patterns, and operational guides for engineering teams.
Requirements
- 5–10 years of experience in DevOps, Platform Engineering, Cloud Engineering, Infrastructure Automation, or similar roles.
- Strong hands-on Azure cloud experience is essential.
- Strong Terraform experience on Azure, especially Terraform modules, multi-environment setup, remote state management, and pipeline-based execution.
- Strong experience with GitLab CI/CD or GitHub Actions.
- Good understanding of Azure networking and platform fundamentals, including VNets, NSGs, private endpoints, firewalls, VPN/ExpressRoute, and hub-and-spoke network design.
- Familiarity with Azure identity and shared services, including RBAC, managed identities, Key Vault, Log Analytics, storage, and monitoring services.
- Good Azure solution architecture understanding, with the ability to advise teams on which cloud resources and architecture patterns to use.
- Experience supporting application deployment into Azure services such as App Service, Container Apps, Azure Functions, Databricks, or similar platforms.
- Familiar with DevSecOps practices and integrating security tools into CI/CD pipelines.
- Experience with security scanning areas such as SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and/or Infrastructure-as-Code scanning.
- Clear communication skills, with the ability to document standards and guide engineering teams on best practices.
- Able to work independently, handle ambiguity, and operate with limited day-to-day supervision.
- Prior experience in financial services, banking, investment management, or another regulated environment is an advantage.
- Exposure to AI-assisted development tools or cloud coding tools would be a plus.
