Junior Cloud Engineer

Key Responsibilities

Network Architecture & Design (Azure & Hybrid)

. Design, deploy, and manage scalable and secure network architectures in Microsoft Azure, encompassing core Azure networking services such as Azure Virtual Network (VNet), Azure ExpressRoute, Azure Virtual WAN, Azure DNS, Azure Firewall, Azure Application Gateway/Front Door, and Load Balancers

. Architect and implement robust hybrid cloud connectivity solutions, including Azure VPN Gateway, ExpressRoute, and site-to-site VPNs

. Strategize and optimize network segmentation, IP addressing schemes, and routing policies across both on-premises and Azure environments

. Design and implement network solutions tailored for the Singapore Government Commercial Cloud (GCC) framework, adhering to IM8 policies and government security standards

On-Premises Network Operations & Management

. Manage, configure, and troubleshoot enterprise-grade network devices including routers (Cisco, Juniper) and switches (Cisco Catalyst/Nexus, Arista)

. Work extensively with protocols such as BGP, OSPF, EIGRP, VLANs, STP, HSRP/VRRP, and QoS

. Administer and maintain firewalls (Checkpoint, Palo Alto Networks, Cisco ASA) including policies and VPNs

. Oversee web proxy solutions (Bluecoat ProxySG, Zscaler)

. Manage enterprise wireless networks including WLCs and Access Points

. Implement and manage load balancers (F5 BIG-IP, Citrix ADC)

Azure Cloud Network Management

. Monitor and optimize Azure network performance and reliability

. Troubleshoot complex Azure network issues

. Enforce security best practices using NSGs, Defender for Cloud, Azure DDoS Protection, and Front Door WAF

Logging, Alerts & Monitoring

. Configure monitoring and alerting using Azure Monitor, Log Analytics, Activity Log, and Resource Health

. Use Azure Policy and Azure Resource Graph for compliance checks

. Leverage Microsoft Defender for Cloud for threat detection and security posture management

Automation & Optimization

. Develop Infrastructure as Code (IaC) using ARM templates, Bicep, and Terraform

. Integrate deployments with GitHub CI/CD pipelines

. Continuously improve network efficiency, scalability, and security using new Azure and on-prem technologies

Collaboration & Support

. Work closely with DevOps, Security, Application, and Infrastructure teams

. Collaborate with third-party vendors and service providers

Documentation & Compliance

. Maintain detailed network diagrams, configurations, and SOPs

. Ensure compliance with industry standards, regulatory requirements, and internal security policies

. Adhere to Singapore government policies including IM8 and GCC security requirements

Qualifications & Skills

. Bachelor's degree in Computer Science, Information Technology, or related discipline

. Minimum 1-2 years of experience in enterprise networking across on-premises and cloud platforms

. Strong expertise in router/switch configuration (Cisco, Juniper, Arista)

. Advanced routing protocols knowledge (BGP, OSPF, EIGRP)

. Hands-on firewall management experience

. Experience with proxies and load balancers

. Deep knowledge of Azure networking services (VNet, ExpressRoute, Virtual WAN, Firewall, App Gateway, Front Door, NSGs)

. Proven hybrid cloud design and implementation experience

. Proficiency with Azure Monitor, Log Analytics, Defender for Cloud

. Strong experience with Terraform, Bicep, and CI/CD pipelines

. Essential: Singapore Government Commercial Cloud (GCC) and IM8 compliance experience

Certifications

. Microsoft Certified: Azure Network Engineer Associate

. Microsoft Certified: Azure Solutions Architect Expert

. Microsoft Certified: Azure Security Engineer Associate

. CCNP Enterprise / CCIE / JNCIP / PCNSE