Azure Cloud Security Engineer - Hands-on Migrations

EPAM; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Great Place to Work Certification

Upskilling & certification programs

Mentoring programs

Job summary

EPAM is seeking an Azure Cloud Engineer in Singapore to remediate security gaps and build landing zone components for workloads migrating from on-premises. This hands-on role involves building, testing, migrating, and documenting within a controlled change framework.

You will implement governance, RBAC, and private connectivity, while delivering repeatable builds with IaC and automation. Strong Azure experience and on-site availability in Singapore are required.

Qualifications

• Azure engineering delivery experience across remediation and migration in production environments.
• Delivery to defined architecture with formal change control and rollback planning.
• Experience with Azure compute, storage, networking, governance and resource management.

Responsibilities

• Remediate cloud security, vulnerability and audit findings, tracking closure with evidence.
• Harden Azure compute, storage, networking, key management and logging to baselines.
• Implement Azure Policy, tagging, governance guardrails, RBAC and privileged access controls.
• Build landing zone components including networks, subnets, DNS and private endpoints.
• Configure hybrid connectivity like VPN Gateway and ExpressRoute with documented requirements.
• Deliver repeatable builds using infrastructure as code and automation where possible.
• Execute migration waves including assessment, data transfer, testing and cutover.
• Produce as-built docs, runbooks and knowledge transfer under MAS Tech Risk Management.

Skills

Azure engineering delivery

Migration experience

Cloud security remediation

RBAC & IAM

Tools

Terraform

Bicep

Azure CLI

PowerShell

Azure Migrate

Azure Site Recovery

Job description

EPAM is seeking an Azure Cloud Engineer in Singapore to remediate security gaps and build landing zone components for workloads migrating from on-premises. This hands-on role involves building, testing, migrating, and documenting within a controlled change framework.

You will implement governance, RBAC, and private connectivity, while delivering repeatable builds with IaC and automation. Strong Azure experience and on-site availability in Singapore are required.