Azure Cloud Engineer (Contract)

Nicoll Curtin; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

Nicoll Curtin is seeking an Azure Cloud Engineer (Cloud Infrastructure / Platform Engineering) in Singapore on a hybrid, 1-year contract. The role focuses on building and managing Azure Terraform modules, CI/CD pipelines with GitLab, and comprehensive security and monitoring integrations.

The candidate will implement scalable landing zones, automate deployments across Dev/QA/UAT/Prod, and collaborate with security/infrastructure teams to enforce guardrails and cost-optimised operations.

Qualifications

• 5–8 years in DevOps or Platform Engineering with Azure experience.
• Hands-on Azure Terraform modules and multi-environment config.
• Proven CI/CD delivery using GitLab or similar tools.
• Strong Azure networking knowledge (VNets, NSGs, private endpoints).
• Automation scripting in Python/PowerShell/Bash.
• Ability to review MR and troubleshoot infra/pipelines.
• Clear written and verbal communication across teams.
• Degree in CS/Engineering preferred.

Responsibilities

• Develop Azure Terraform modules for mgmt groups, subscriptions, RBAC, and VNets.
• Manage remote state, workspaces, and environments across Dev/QA/UAT/Prod.
• Build GitLab CI pipelines with fmt, validate, plan, apply stages.
• Create reusable infra templates and integrate apps with landing zones.
• Embed security scans and coordinate with security teams on guardrails.
• Integrate Azure Monitor and Grafana for monitoring/alerts; optimize costs.
• Support incident response and pipeline resilience.
• Document CI/CD patterns and coach engineers on Terraform changes.
• Enforce IaC and avoid manual portal changes.

Skills

Azure Terraform

CI/CD with GitLab

Azure networking

Python scripting

Security scanning

Education

Degree in CS/Engineering

Tools

Terraform

GitLab

Grafana

Log Analytics

Azure Monitor

Job description

Azure Cloud Engineer (Cloud Infrastructure / Platform Engineering)

• Location: Singapore (Hybrid)
• Employment type: 1-year contract (renewable based on project demand)

Key Responsibilities

• Develop Azure Terraform modules covering management groups, subscriptions, RBAC, hub-and-spoke VNets, firewalls, private endpoints, Key Vault, storage, Container Apps, data platforms, and Log Analytics/Grafana.
• Manage remote state, workspaces, module versions, and safe promotion across Dev/QA/UAT/Prod.
• Build GitLab CI pipelines with fmt, validate, plan, and apply stages; enforce merge-request plan comments, approvals, and gated production deployment.
• Create reusable infrastructure, build, test, deployment, and smoke-test templates; integrate application/data repositories with Azure landing zones, App Service, Container Apps, Functions, and Databricks, aligned with subscription/VNet structures.
• Embed JFrog Advanced Security, SAST, SCA/OSS, secret, container/image, and IaC scanning; collaborate with Security/Infrastructure teams on default guardrails, policy checks, and severity-based promotion thresholds.
• Integrate Azure Monitor, Log Analytics, and Grafana monitoring/alerting; optimise costs through non-production auto-shutdown and standardised Terraform scaling/sizing.
• Support incident response, post-mortems, pipeline resilience, and rollback improvements.
• Document CI/CD patterns, module usage, and guides; coach engineers on GitLab, safe Terraform changes, and plan interpretation; enforce infrastructure-as-code without manual platform portal changes.

Job Requirements

• 5–8 years in DevOps or Platform Engineering, with substantial Azure experience.
• Hands-on Azure Terraform expertise: modules, multi-environment configurations, and state backends.
• Proven infrastructure/application CI/CD delivery using GitLab or similar tools.
• Strong Azure networking knowledge: VNets, NSGs, private endpoints, VPN/ExpressRoute; working knowledge of RBAC, managed identities, Key Vault, and Log Analytics.
• Automation scripting in Python, PowerShell, or Bash; familiarity with DevSecOps scanning practices.
• Ability to review Terraform/CI merge requests and troubleshoot infrastructure, pipelines, and cloud services.
• Clear written/verbal communication and collaboration across infrastructure, security, and application teams.
• Degree in Computer Science, Engineering, Information Technology, or a related discipline preferred