Assistant Manager, Infrastructure Architecture & Delivery

FWD Insurance; Hong Kong; On-site; HKD 850,000 - 1,200,000; Full time

Benefits offered by this job

5-day work

Annual leave 20-22 days

Learning & development opportunities

Attractive package

Job summary

FWD Group in Hong Kong is seeking an experienced Infrastructure/Cloud Engineer focused on Azure. You will manage end-to-end Azure infrastructure, monitoring and security, delivering connectivity, identity, and platform capabilities for enterprise projects.

The role requires 5+ years of hands-on cloud experience, strong Azure knowledge, IaC expertise with Terraform/ARM and scripting. It offers a 5-day work week, generous annual leave, and strong learning opportunities.

Qualifications

• At least five years of hands-on infrastructure or cloud engineering experience.
• Strong knowledge of Azure infrastructure, networking, identity and RBAC, and PaaS services.
• Experience with Azure Managed Grafana, Monitor, Log Analytics, Application Insights, dashboards, and alerts.
• Experience with Active Directory, ADFS, Web Application Proxy, SAML, OAuth, registrations and service principals.
• Automation and IaC using Terraform, ARM templates, Azure CLI, PowerShell, Python, and Git.
• Strong troubleshooting, documentation, communication and vendor-management skills.
• Knowledge of Power Platform and Fabric infrastructure dependencies is a plus.

Responsibilities

• Manage infrastructure work from requirements through implementation, testing, and handover.
• Deliver Azure infrastructure, connectivity, monitoring, identity, and platform requirements.
• Operate and improve Grafana, Monitor, Log Analytics, Application Insights, dashboards, and alerts.
• Manage Azure connectivity components including VNets, subnets, route tables, Private Endpoints, DNS Zones and firewalls.
• Support Azure PaaS, Power Platform, Fabric, hybrid identity and certificate lifecycle.
• Provide L2/L3 support, incidents, root-cause analysis, and coordinate resolutions with teams and vendors.
• Prepare plans, risk assessments, test procedures, rollback plans, SOPs and runbooks.
• Use IaC, scripting, Git-based configuration, reusable templates and automation.
• Manage vendor deliverables, proposals, service quality, risks and progress reporting.
• Support governance, security reviews, production-readiness checks and continuous improvement.

Skills

Azure infrastructure

Networking

Identity & access

PaaS services

Automation & IaC

Tools

Terraform

ARM templates

Azure CLI

PowerShell

Python

Git

Job description

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828. For more information, please visit www.fwd.com

For more information about FWD Hong Kong, please visit www.fwd.com.hk/

Summary

This role is responsible for delivering, operating, and improving enterprise infrastructure and cloud platforms. It covers Azure monitoring and observability, cloud connectivity, hybrid identity, platform support, and automation. The role works with Enterprise Architecture, IT Security & Assurance, Application, IT Operations, managed-service providers, and vendors to deliver secure, reliable, scalable, and supportable services.

The Job

• Manage assigned infrastructure work from requirement analysis and design through implementation, testing, production handover, and review.
• Deliver Azure infrastructure, connectivity, monitoring, identity, and platform requirements for business and application projects.
• Operate and improve Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, dashboards, alerts, reports, and monitoring integrations.
• Manage Azure connectivity components, including VNets, subnets, route tables, Private Endpoints, Private DNS Zones, and firewall dependencies.
• Support Azure PaaS services, Microsoft Power Platform, Microsoft Fabric, hybrid identity, and certificate lifecycle management.
• Provide L2/L3 support, investigate incidents, perform root-cause analysis, and coordinate resolution with internal teams, Microsoft, service providers, and vendors.
• Prepare implementation plans, change requests, risk assessments, test procedures, rollback plans, SOPs, runbooks, diagrams, and handover documents.
• Use Infrastructure as Code, scripting, Git-based configuration management, reusable templates, and automation to improve consistency, control, and efficiency.
• Manage vendor deliverables, technical proposals, quotations, service quality, risks, dependencies, and progress reporting.
• Support service governance, security reviews, production-readiness checks, operational acceptance, and continuous improvement.

The Person

• At least five years of hands-on experience in infrastructure or cloud engineering, preferably in a regulated enterprise environment.
• Strong knowledge of Microsoft Azure infrastructure, networking, identity, role-based access control, and PaaS services.
• Practical experience with Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, KQL, dashboards, alerts, and diagnostic settings.
• Experience with Active Directory, ADFS, Web Application Proxy, SAML, OAuth, application registrations, service principals, and certificate-based authentication.
• Experience with automation and Infrastructure as Code using tools such as Terraform, ARM templates, Azure CLI, PowerShell, Python, and Git.
• Strong troubleshooting, analytical, documentation, communication, and vendor-management skills.
• Working knowledge of Microsoft Power Platform and Microsoft Fabric infrastructure dependencies is an advantage.

• 5-day work
• 20-22 days annual leaves
• excellent learning & development opportunities
• an attractive package to the right candidate

Information collected will be treated in strict confidence and used solely for recruitment purpose. The company will retain all applications no longer than 24 months of which will be destroyed thereafter. When there are vacancies in any of our subsidiaries, holding companies, associated or affiliated companies of, or companies controlled by, or under common control with the Company during that period, we may transfer your application to them for consideration of employment. We are an equal opportunity employer. We do not discriminate on the basis of race, gender, disability or family status in employment process.