DevOps / Cloud Platform Engineer (Azure & Terraform)

Our client is a well-established organization within the financial services sector in Singapore. They are looking for a hands-on DevOps / Cloud Platform Engineer to help build, automate, and operate their Azure cloud platform through Infrastructure-as-Code and pipeline-driven delivery.

This role is suited for someone with strong Azure and Terraform experience, who can create infrastructure through code, build reusable CI/CD patterns, and support application teams in deploying securely into Azure.

Job Description

• Design, build, and maintain Terraform modules for Azure cloud infrastructure, including management groups, subscriptions, RBAC, virtual networks, firewalls, private endpoints, and shared platform services.

• Drive an “Infrastructure-as-Code first” approach, ensuring cloud resources are provisioned and changed through code and pipelines rather than manual portal work.

• Manage Terraform remote state, module versioning, workspaces, reusable patterns, and safe promotion across development, QA, UAT, and production environments.

• Build and maintain GitLab CI/CD or GitHub Actions pipelines for infrastructure provisioning, including validation, planning, approvals, and controlled apply processes.

• Create reusable CI/CD templates that application, data, and engineering teams can adopt for infrastructure, deployment, testing, and smoke test workflows.

• Support application and data teams in integrating their repositories with standard CI/CD templates for build, test, and deployment automation.

• Enable deployments into Azure services such as App Service, Container Apps, Azure Functions, Databricks, storage, and other cloud platform components.

• Advise application teams on suitable Azure services, infrastructure design, network patterns, and overall solution architecture for new applications.

• Integrate security checks into CI/CD pipelines, including SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and Infrastructure-as-Code scanning.

• Work with security and infrastructure teams to build secure-by-default cloud and pipeline guardrails, especially around network and infrastructure security.

• Connect infrastructure and application pipelines with monitoring and alerting tools such as Azure Monitor, Log Analytics, and Grafana.

• Contribute to platform reliability, incident response, post-incident reviews, rollback improvements, pipeline resilience, and cloud cost optimization.

• Document CI/CD standards, Terraform module usage, deployment patterns, and operational guides for engineering teams.

Requirements

• 5–10 years of experience in DevOps, Platform Engineering, Cloud Engineering, Infrastructure Automation, or similar roles.

• Strong hands-on Azure cloud experience is essential.

• Strong Terraform experience on Azure, especially Terraform modules, multi-environment setup, remote state management, and pipeline-based execution.

• Strong experience with GitLab CI/CD or GitHub Actions.

• Good understanding of Azure networking and platform fundamentals, including VNets, NSGs, private endpoints, firewalls, VPN/ExpressRoute, and hub-and-spoke network design.

• Familiarity with Azure identity and shared services, including RBAC, managed identities, Key Vault, Log Analytics, storage, and monitoring services.

• Good Azure solution architecture understanding, with the ability to advise teams on which cloud resources and architecture patterns to use.

• Experience supporting application deployment into Azure services such as App Service, Container Apps, Azure Functions, Databricks, or similar platforms.

• Familiar with DevSecOps practices and integrating security tools into CI/CD pipelines.

• Experience with security scanning areas such as SAST, SCA/open-source dependency scanning, secret scanning, container scanning, and/or Infrastructure-as-Code scanning.

• Clear communication skills, with the ability to document standards and guide engineering teams on best practices.

• Able to work independently, handle ambiguity, and operate with limited day-to-day supervision.

• Prior experience in financial services, banking, investment management, or another regulated environment is an advantage.

• Exposure to AI-assisted development tools or cloud coding tools would be a plus.