Cloud Engineer

Ambition; Hong Kong Island; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Ambition is seeking an Azure Infrastructure Specialist to design, implement, and manage cloud infrastructure across projects in Hong Kong. You will deploy solutions, monitor performance, and ensure secure identity and access management with RBAC.

Responsibilities include configuring VNets, Private Endpoints, and PaaS integrations while leveraging Terraform, ARM templates, and scripting for automation. Strong communication and vendor coordination are required.

Qualifications

• Solid expertise in Microsoft Azure infrastructure, networking, IAM, and RBAC.
• Hands-on with Azure Monitor, Grafana, Log Analytics, KPI, dashboards and alerts.
• Knowledge of AD, ADFS, WAP, SAML, OAuth, service principals, cert-based authentication.
• Experience with IaC using Terraform, ARM templates, Azure CLI, PowerShell, Python, Git.
• Strong problem-solving, documentation, communication, and vendor management.

Responsibilities

• Manage assigned infrastructure initiatives from requirements gathering through deployment, testing, production transition, and post-implementation review.
• Deliver and support Azure infrastructure solutions, including networking, connectivity, monitoring, identity management, and platform services for projects.
• Administer and enhance monitoring platforms such as Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, dashboards, alerts, reporting, and integrations.
• Oversee Azure networking and connectivity services, including VNets, subnets, route tables, Private Endpoints, Private DNS Zones, and firewall configurations.
• Provide support for Azure PaaS offerings, Microsoft Power Platform, Microsoft Fabric, hybrid identity solutions, and certificate lifecycle management.

Skills

Azure infrastructure

RBAC

KQL

Problem solving

Documentation

Communication

Tools

Terraform

ARM templates

Azure CLI

PowerShell

Python

Git

Job description

• Manage assigned infrastructure initiatives from requirements gathering and solution design through deployment, testing, production transition, and post-implementation review.
• Deliver and support Azure infrastructure solutions, including networking, connectivity, monitoring, identity management, and platform services for business and application projects.
• Administer and enhance monitoring platforms such as Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, along with dashboards, alerts, reporting, and related integrations.
• Oversee Azure networking and connectivity services, including Virtual Networks (VNets), subnets, route tables, Private Endpoints, Private DNS Zones, and associated firewall configurations.
• Provide support for Azure PaaS offerings, Microsoft Power Platform, Microsoft Fabric, hybrid identity solutions, and certificate lifecycle management.

Requirements

• Solid expertise in Microsoft Azure infrastructure, networking, identity and access management, role-based access control (RBAC), and Azure PaaS services.
• Hands‑on experience with Azure Managed Grafana, Azure Monitor, Log Analytics, Application Insights, Kusto Query Language (KQL), dashboards, alerting, and diagnostic configurations.
• Strong understanding of Active Directory, ADFS, Web Application Proxy (WAP), SAML, OAuth, application registrations, service principals, and certificate‑based authentication mechanisms.
• Experience in automation and Infrastructure as Code (IaC) using tools such as Terraform, ARM templates, Azure CLI, PowerShell, Python, and Git.
• Excellent problem‑solving, analytical, documentation, communication, and vendor management capabilities.