Azure Platform Devops Engineer

SOFTENGER (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

SOFTENGER (SINGAPORE) PTE. LTD. seeks a senior cloud engineer with extensive Azure infrastructure, networking, and automation experience to guide large-scale deployments.

You will implement IaC with Terraform, manage Azure DevOps pipelines, and enforce security and governance across APAC environments. The role requires hands-on architecture-to-implementation delivery and seamless production handovers.

Qualifications

• Minimum 10+ years IT experience with Azure infra, networking, automation and production implementation.
• Advanced Terraform experience with reusable modules, remote state, environment promotion, imports and troubleshooting.
• Strong Azure DevOps experience across Repos, YAML pipelines, service connections, environments, approvals and reusable templates.
• Enterprise Azure networking incl. VNets, subnets, NSGs, UDRs, hub-spoke or Virtual WAN, ExpressRoute, VPN, BGP and hybrid connectivity.
• Hands-on knowledge of Azure Firewall, NAT Gateway, Private Link, private endpoints, DNS Private Resolver and private DNS zones.
• Experience with Azure landing zones, management groups, subscriptions, resource groups, Azure Policy, tagging and governance.
• Knowledge of Microsoft Entra ID, Azure RBAC, managed identities, Privileged Identity Management and Key Vault.
• Experience with Azure Monitor, Log Analytics, diagnostic settings, Network Watcher and KQL.
• PowerShell and Python automation scripting.
• Git workflows, PRs, code reviews, release management, and IaC testing.
• DevSecOps with Checkov, TFLint, tfsec, Pester.
• Ability to translate architecture into detailed designs, production-grade code and handover docs.
• Hands-on production deployment, troubleshooting, rollback and handover.

Skills

Azure infrastructure

Networking

Automation

Terraform

Azure DevOps

PowerShell

Python

Infrastructure as Code

Security tooling

Checkov

Tools

Terraform

Azure DevOps

Checkov

tfsec

Pester

Azure Monitor

Job description

• Minimum 10+ years of IT experience with substantialhands-on Azure infrastructure, networking, automation and productionimplementation experience.
• Advanced Terraform experience covering reusablemodules, remote state, environment promotion, imports and troubleshooting.
• Strong Azure DevOps experience across Repos, YAMLPipelines, service connections, environments, approvals and reusable templates.
• Enterprise Azure networking experience covering VNets,subnets, NSGs, UDRs, hub-and-spoke or Virtual WAN, ExpressRoute, VPN, BGP andhybrid connectivity.
• Hands-on knowledge of Azure Firewall, NAT Gateway, Private Link, private endpoints, DNS Private Resolver and private DNS zones.
• Experience with Azure landing zones, managementgroups, subscriptions, resource groups, Azure Policy, tagging and governance.
• Strong knowledge of Microsoft Entra ID, Azure RBAC,managed identities, Privileged Identity Management and Key Vault.
• Experience with Azure Monitor, Log Analytics,diagnostic settings, Network Watcher and KQL.
• Strong PowerShell skills and working knowledge ofPython or a comparable automation language.
• Git workflows, pull requests, code reviews, releasemanagement and Infrastructure as Code testing.
• DevSecOps experience using Checkov, TFLint, tfsec,Pester or equivalent tooling.
• Ability to translate architecture into detaileddesigns, production-grade code, implementation plans and support documentation.
• Hands-on production deployment, troubleshooting,rollback and operational handover experience.

Preferred Skills

• Microsoft Cloud VDI Enterprise, Azure NetworkConnection and Cloud PC provisioning concepts.
• Microsoft Intune administration, Microsoft Graph APIand endpoint management integration.
• Azure Virtual Desktop and Citrix VDI migration ortransformation experience.
• Azure Functions, Logic Apps, Automation Accounts andself-service automation.
• Cloud-native SASE, secure web gateway or enterpriseproxy integration.
• ServiceNow integration and enterprise change, incidentand configuration-management processes.
• Large-scale, multi-region cloud transformationexperience.
• Experience working across distributed APACinfrastructure, network, security and operations teams.
• Banking, financial services or another regulatedenterprise environment.

Preferred Certifications / Background

• AZ-700: Designing and Implementing Microsoft AzureNetworking Solutions.
• AZ-104: Microsoft Azure Administrator.
• AZ-400: Microsoft DevOps Engineer Expert.
• HashiCorp Certified: Terraform Associate.
• AZ-500: Microsoft Azure Security Engineer Associate.
• Demonstrated delivery of production Azureinfrastructure through Terraform and Azure DevOps.
• Experience operating under formal architecture, security, risk, auditand change-governance processes