DevOps / Cloud Platform Engineer (Azure & Terraform)

Our client is a well-established organization within the financial services sector in Singapore. They are looking for a hands-on DevOps / Cloud Platform Engineer to help build, automate, and operate their Azure cloud platform through Infrastructure-as-Code and pipeline-driven delivery.

This role is suited for someone with strong Azure and Terraform experience, who can create infrastructure through code, build reusable CI/CD patterns, and support application teams in deploying securely into Azure.

Job Description

. Design, build, and maintain Terraform modules for Azure cloud infrastructure, including management groups, subscriptions, RBAC, virtual networks, firewalls, private endpoints, and shared platform services.

. Drive an Infrastructure-as-Code first approach, ensuring cloud resources are provisioned and changed through code and pipelines rather than manual portal work.

. Manage Terraform remote state, module versioning, workspaces, reusable patterns, and safe promotion across development, QA, UAT, and production environments.

. Build and maintain GitLab CI/CD or GitHub Actions pipelines for infrastructure provisioning, including validation, planning, approvals, and controlled apply processes.

. Create reusable CI/CD templates that application, data, and engineering teams can adopt for infrastructure, deployment, testing, and smoke test workflows.

. Support application and data teams in integrating their repositories with standard CI/CD templates for build, test, and deployment automation.

. Enable deployments into Azure services such as App Service, Container Apps, Azure Functions, Databricks, storage, and other cloud platform components.

. Advise application teams on suitable Azure services, infrastructure design, network patterns, and overall solution architecture for new applications.

. Integrate security checks into CI/CD pipelines, including SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and Infrastructure-as-Code scanning.

. Work with security and infrastructure teams to build secure-by-default cloud and pipeline guardrails, especially around network and infrastructure security.

. Connect infrastructure and application pipelines with monitoring and alerting tools such as Azure Monitor, Log Analytics, and Grafana.

. Contribute to platform reliability, incident response, post-incident reviews, rollback improvements, pipeline resilience, and cloud cost optimization.

. Document CI/CD standards, Terraform module usage, deployment patterns, and operational guides for engineering teams.

Requirements

. 5-10 years of experience in DevOps, Platform Engineering, Cloud Engineering, Infrastructure Automation, or similar roles.

. Strong hands-on Azure cloud experience is essential.

. Strong Terraform experience on Azure, especially Terraform modules, multi-environment setup, remote state management, and pipeline-based execution.

. Strong experience with GitLab CI/CD or GitHub Actions.

. Good understanding of Azure networking and platform fundamentals, including VNets, NSGs, private endpoints, firewalls, VPN/ExpressRoute, and hub-and-spoke network design.

. Familiarity with Azure identity and shared services, including RBAC, managed identities, Key Vault, Log Analytics, storage, and monitoring services.

. Good Azure solution architecture understanding, with the ability to advise teams on which cloud resources and architecture patterns to use.

. Experience supporting application deployment into Azure services such as App Service, Container Apps, Azure Functions, Databricks, or similar platforms.

. Familiar with DevSecOps practices and integrating security tools into CI/CD pipelines.

. Experience with security scanning areas such as SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and/or Infrastructure-as-Code scanning.

. Clear communication skills, with the ability to document standards and guide engineering teams on best practices.

. Able to work independently, handle ambiguity, and operate with limited day-to-day supervision.

. Prior experience in financial services, banking, investment management, or another regulated environment is an advantage.

. Exposure to AI-assisted development tools or cloud coding tools would be a plus.