Assistant Manager, Infrastructure Architecture & Delivery

FWD Insurance; Hong Kong; On-site; HKD 520,000 - 800,000; Full time

Benefits offered by this job

5-day work week

20-22 days annual leave

Learning & development opportunities

Competitive package

Job summary

FWD Group in Hong Kong is recruiting an experienced infrastructure/cloud engineer to deliver, operate, and enhance Azure-based platforms and enterprise infrastructure. The role focuses on monitoring, connectivity, hybrid identity, and automation in collaboration with architecture, IT security, and vendors.

You will manage end-to-end infrastructure work, help implement Azure PaaS, and support security, monitoring, and deployment processes while driving continuous improvement and operational

Qualifications

• Five+ years hands-on experience in infrastructure or cloud engineering, preferably in regulated environments.
• Strong knowledge of Microsoft Azure infrastructure, networking, identity, and RBAC.
• Experience with Azure Managed Grafana, Azure Monitor, Log Analytics and App Insights; scripting and automation.
• Experience with Active Directory, ADFS, and modern authentication protocols (SAML, OAuth).

Responsibilities

• Manage infrastructure work from requirements to design, implementation, testing, and handover.
• Deliver Azure infrastructure, connectivity, monitoring, identity, and platform requirements for projects.
• Operate and improve Azure Grafana, Monitor, Log Analytics, App Insights, dashboards and alerts.
• Manage Azure connectivity components: VNets, subnets, route tables, Private Endpoints, Private DNS Zones, firewalls.
• Support Azure PaaS, Power Platform, and Fabric; manage certificate lifecycles.
• Provide L2/L3 support, investigate incidents, perform root-cause analysis, coordinate resolutions.
• Prepare implementation plans, change requests, risk assessments, SOPs, runbooks, diagrams and handover docs.
• Use IaC and automation to improve consistency, control, and efficiency.
• Manage vendor deliverables, proposals, service quality, risks and progress reporting.
• Support governance, security reviews, production-readiness checks, and continuous improvement.

Skills

Azure infrastructure

Networking

Identity & RBAC

PaaS services

Azure Monitor/Grafana/Log Analytics

KQL

Active Directory/ADFS

SAML/OAuth

IaC (Terraform/ARM)

CLI/PowerShell/Python/Git

Troubleshooting

Documentation

Vendor management

Power Platform familiarity

Tools

Terraform

ARM templates

Azure CLI

PowerShell

Python

Git

Grafana

Azure Monitor

Log Analytics

Application Insights

Job description

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828. For more information, please visit www.fwd.com

For more information about FWD Hong Kong, please visit www.fwd.com.hk/

Summary

This role is responsible for delivering, operating, and improving enterprise infrastructure and cloud platforms. It covers Azure monitoring and observability, cloud connectivity, hybrid identity, platform support, and automation. The role works with Enterprise Architecture, IT Security & Assurance, Application, IT Operations, managed-service providers, and vendors to deliver secure, reliable, scalable, and supportable services.

The Job

• Manage assigned infrastructure work from requirement analysis and design through implementation, testing, production handover, and review.
• Deliver Azure infrastructure, connectivity, monitoring, identity, and platform requirements for business and application projects.
• Operate and improve Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, dashboards, alerts, reports, and monitoring integrations.
• Manage Azure connectivity components, including VNets, subnets, route tables, Private Endpoints, Private DNS Zones, and firewall dependencies.
• Support Azure PaaS services, Microsoft Power Platform, Microsoft Fabric, hybrid identity, and certificate lifecycle management.
• Provide L2/L3 support, investigate incidents, perform root-cause analysis, and coordinate resolution with internal teams, Microsoft, service providers, and vendors.
• Prepare implementation plans, change requests, risk assessments, test procedures, rollback plans, SOPs, runbooks, diagrams, and handover documents.
• Use Infrastructure as Code, scripting, Git-based configuration management, reusable templates, and automation to improve consistency, control, and efficiency.
• Manage vendor deliverables, technical proposals, quotations, service quality, risks, dependencies, and progress reporting.
• Support service governance, security reviews, production-readiness checks, operational acceptance, and continuous improvement.

The Person

• At least five years of hands-on experience in infrastructure or cloud engineering, preferably in a regulated enterprise environment.
• Strong knowledge of Microsoft Azure infrastructure, networking, identity, role-based access control, and PaaS services.
• Practical experience with Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, KQL, dashboards, alerts, and diagnostic settings.
• Experience with Active Directory, ADFS, Web Application Proxy, SAML, OAuth, application registrations, service principals, and certificate-based authentication.
• Experience with automation and Infrastructure as Code using tools such as Terraform, ARM templates, Azure CLI, PowerShell, Python, and Git.
• Strong troubleshooting, analytical, documentation, communication, and vendor-management skills.
• Working knowledge of Microsoft Power Platform and Microsoft Fabric infrastructure dependencies is an advantage.

Benefits

• We offer 5-day work
• 20-22 days annual leaves
• excellent learning & development opportunities
• an attractive package to the right candidate

Information collected will be treated in strict confidence and used solely for recruitment purpose. The company will retain all applications no longer than 24 months of which will be destroyed thereafter. When there are vacancies in any of our subsidiaries, holding companies, associated or affiliated companies of, or companies controlled by, or under common control with the Company during that period, we may transfer your application to them for consideration of employment.

We are an equal opportunity employer. We do not discriminate on the basis of race, gender, disability or family status in employment process.