Cloud Specialist

Dexian Asia Pacific; Kuala Lumpur; On-site; MYR 90,000 - 160,000; Full time

Job summary

Dexian Asia Pacific is seeking an Azure Cloud Specialist with deep expertise in ARM, RBAC, Networking, Compute and Storage to manage compliant cloud environments at scale.

You will implement Azure Policies (custom and built-in), IaC using Terraform, ARM templates and Bicep, automate deployments, secure access, monitor with Azure Monitor and Application Insights, and script in PowerShell, Azure CLI, Bash, YAML/JSON. Strong security and compliance mindset required.

Qualifications

• Proven expertise in Azure core services and governance.
• Experience implementing Azure Policy definitions and initiatives.
• Proficient in IaC with Terraform, ARM templates, and Bicep.
• Strong understanding of security controls and IAM in Azure.

Skills

Azure

Azure Policy

IaC

DevOps

Monitoring

Scripting

Networking

IAM

Security

Git

Tools

Terraform

ARM templates

Bicep

Azure DevOps

GitHub

PowerShell

Azure CLI

REST API

Job description

Expertise in Microsoft Azure, including core services such as Azure Resource Manager (ARM), Azure RBAC, Azure Networking, Azure Compute, Storage, with the ability to manage compliant cloud environments at scale.

Experience in creating, managing, and implementing Azure Policies.

Knowledge of Azure Policy Definitions (Custom and Built-in), Initiatives, Assignments, Exemptions and Policy Effects.

Knowledge of Azure Policy Compliance Management and Remediation (Auto and Manual).

Proficiency in Azure services like Azure DevOps, Azure Functions, Azure Runbook, and others.

c) Infrastructure as Code (IaC):

Knowledge in using tools like Terraform, Azure Resource Manager (ARM) templates, and Bicep.

Experience in writing and maintaining IaC scripts to automate infrastructure deployment.

Familiarity with version control systems like Git for managing IaC code.

d) Security and Compliance:

Basic understanding of Azure Security Center and Azure Defender.

Ability to implement security best practices and compliance controls.

Knowledge of identity and access management (IAM) using Azure Active Directory (AAD).

Experience with Azure DevOps pipelines and/or GitHub for automating build, test, and deployment processes.

Skills in configuring secure access to pipeline resources and managing pipeline permissions.

f) Monitoring and Logging:

Experience in using Azure Monitor, Rest API calls, Log Analytics, and Application Insights.

Ability to set up alerts and dashboards to monitor compliance and security metrics.

g) Coding and Scripting:

Knowledge of scripting languages such as PowerShell, Azure Powershell, Azure CLI, Bash, Declarative language using YAML and JSON, Terraform and Markdown.

Ability to write scripts for automating security controls and compliance checks.

h) Networking and Security:

Understanding of network security concepts, including firewalls, VPNs, and network security groups (NSGs).

Experience with securing application secrets using Azure Key Vault and other Client Secret Management Tools.

Knowledge of Client Security Coding Best Practices and Cyber Security Guidelines.

i) Reporting:

Basic knowledge of Azure Resource Graph, SQL query, KQL, EventHub, EventGrid, PowerBI.