Azure DevOps Engineer (Cloud Platform & Infrastructure)

PROVIDEND HOLDING PRIVATE LIMITED; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Providend Holding Private Limited is building a greenfield Azure cloud platform and a robust DevOps culture in a founding-team setup. You will architect scalable AKS/ACA environments, implement secure edge networking with Cloudflare, and establish Zero Trust controls across internal tooling and APIs.

The role emphasizes collaboration with the external vendor, strict change-control processes, and future expansion into AI infrastructure with LLMOps hosting on Azure.

Qualifications

• 4–6 years in DevOps, SRE, or Cloud Infra roles.

Responsibilities

• Container & Cluster Orchestration using AKS/ACA and IaC.
• Edge Security & DNS management with Cloudflare.
• Zero Trust Access control with Cloudflare.
• Vendor collaboration to architect deployment infra and plan handovers.
• CI/CD pipeline automation for deployments.
• Guardrails for financial systems with change-control and rollback discipline.
• Growth area: AI infrastructure and potential LLMOps hosting.

Skills

Azure Cloud

AKS/ACA

Terraform/OpenTofu

Python/Go/JS

CI/CD pipelines

Security & Zero Trust

DNS/Edge Networking

Linux Bash

Tools

Terraform

OpenTofu

Cloudflare

Azure DevOps

Git

Job description

We are seeking a pioneering Azure DevOps Engineer to build our software delivery ecosystem. While our business has decades of financial expertise, our internal software engineering function is a brand-new, founding-team initiative. You will help architect our greenfield Azure cloud platform, collaborate with the vendor on deployment infrastructure, and help set the operational and security foundations for the agentic AI capability Providend is building over time. This is a genuine zero-to-one opportunity: broader ownership and faster growth than a typical DevOps role at a larger organization.

Key Responsibilities:

• Container & Cluster Orchestration: Architect, secure, and manage containerized workloads using Azure Kubernetes Service (AKS) or Azure Container Apps (ACA) to host software services and agentic infrastructure.
• Edge Security & Routing: Manage global networking, secure application perimeters, and DNS management using Cloudflare, in coordination with Providend Technology’s existing Entra ID / Conditional Access controls — designed as a complementary layer, not a duplicate identity plane.
• Zero Trust Access Control: Manage Cloudflare Access (Zero Trust) to enforce strict, identity-aware access controls for internal tools, APIs, and sandboxed environments without relying on traditional VPNs.
• Vendor Collaboration & Knowledge Transfer: Work closely with the external CRM development vendor to architect deployment infrastructure and plan the eventual phase-out of their services.
• CI/CD Pipeline Automation: Build and maintain deployment pipelines, incorporating agentic automation for routine, non-critical operations (code review support, release branching, environment promotions for non-financial-critical services).
• Infrastructure Guardrails for Financial Systems: Apply rigorous change management and rollback discipline to any infrastructure supporting business-critical proprietary system. Autonomous agent-applied fixes are permitted for non-critical infrastructure; any remediation touching the business-critical system’s deployment or infrastructure path requires human approval before execution.
• Growth Area — AI Infrastructure: As Providend’s agentic AI capability matures, this role will grow to include operating LLMOps tooling and hosting MCP servers on our Azure platform. No prior experience required — training and mentorship will be provided as this expands.

Qualifications & Requirements

• Experience Level: 4–6 years of experience in DevOps, Site Reliability, or Cloud Infrastructure roles.
• Azure Cloud Expertise: Solid proficiency provisioning and operating AKS or ACA, and Infrastructure as Code(Terraform/OpenTofu).
• Production Infrastructure for Financial Platforms: Experience operating and securing production cloud infrastructure that hosts financial or transactional systems — deployment pipelines, monitoring, and incident response for environments where downtime or a bad deploy can affect live client-money systems. Comfortable working within strict change-control and rollback discipline, even without owning the underlying data architecture.
• Zero Trust & Edge Networking: Hands-on experience with Cloudflare (or equivalent) for DNS, edge security, and Zero Trust access control.
• Programming & Scripting Proficiency: Solid coding skills in Python, Go, or JavaScript; proficiency in Linux Shell scripting (Bash) and YAML for CI/CD workflow orchestration.
• Founding Team Mindset: High adaptability for a “zero-to-one” small team environment, with the communication skills needed to manage vendor handovers.

Nice to Have

• Familiarity with MAS Technology Risk Management (TRM) guidelines, change management, or data residency requirements in a financial services / MAS-regulated environment.
• Exposure to, or willingness to learn, LLMOps platforms (e.g. Langfuse, LangSmith, Braintrust, Humanloop, Arize Phoenix) covering observability, LLM evaluation, and prompt management.
• Interest in developing fluency with modern AI-assisted engineering tools, such as Cursor or Claude’s feature set (Claude Code, Projects, Artifacts).
• Exposure to LLM-based code review tooling in CI/CD(e.g. Claude Code Review, CodeRabbit, or equivalent).
• Experience managing vendor transitions or insourcing software capabilities.
• Background working in financial services or fintech environments.