Cloud Architect

DYMON ASIA CAPITAL (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

DYMON ASIA CAPITAL (SINGAPORE) PTE. LTD. is seeking an experienced Azure Cloud Engineer to design, implement and operate secure, scalable cloud infrastructure in Azure, with emphasis on Terraform, GitLab CI/CD and DevSecOps.

The role involves collaboration across engineering teams to enhance networking, governance and cost optimisation while promoting secure-by-default practices and production-readiness. The position requires 10–15 years in DevOps/Cloud/Platform/SRE, strong Azure skills, and the

Qualifications

• 10–15 years of experience in DevOps, Cloud/Platform Engineering or SRE.
• Strong hands-on experience with Microsoft Azure.
• Proven ability to design and implement Terraform modules for multi-environment deployments.
• Experience building CI/CD pipelines with GitLab, Azure DevOps, GitHub Actions or Jenkins.
• Good understanding of Azure networking (VNets, NSGs, private endpoints, VPN, ExpressRoute).
• Proficiency in scripting (PowerShell or Python).

Responsibilities

• Design, implement and operate secure, scalable Azure infrastructure.
• Build and maintain Azure management groups, subscriptions, RBAC, networking and shared services.
• Develop hub-and-spoke network architectures and connectivity.
• Support Azure services (Key Vault, Monitor, Log Analytics, Databricks, etc.).
• Establish consistent Dev, QA, UAT and Production environments.
• Implement IaC, drift detection and policy-as-code in production.
• Build and maintain GitLab CI/CD pipelines and automation.

Skills

Azure cloud engineering

Terraform module design

CI/CD pipelines

DevSecOps

Networking - VNets/ExpressRoute

Scripting - PowerShell/Python

Troubleshooting

Stakeholder comms

Tools

Terraform

GitLab CI/CD

Azure DevOps

Jenkins

PowerShell

Job description

Key Responsibilities

• Design, implement and operate secure, scalable Azure infrastructure.
• Build and maintain Azure management groups, subscriptions, RBAC, networking and shared services.
• Develop hub-and-spoke network architectures, including VNets, firewalls, private endpoints, VPN and ExpressRoute connectivity.
• Support Azure services including Key Vault, Azure Monitor, Log Analytics, storage, Container Apps, Functions, Databricks and related platform components.
• Establish consistent Dev, QA, UAT and Production environments.

Infrastructure as Code

• Design and maintain reusable Terraform modules for Azure infrastructure.
• Manage remote state, workspaces, module versioning and environment promotion.
• Ensure platform resources are managed through version-controlled infrastructure-as-code rather than manual portal changes.
• Implement drift detection, policy-as-code and controlled production deployments.

CI/CD and DevOps Automation

• Build and maintain GitLab CI/CD pipelines for infrastructure and applications.
• Implement pipeline stages covering formatting, validation, security scanning, planning, testing and deployment.
• Establish merge-request-driven workflows with code review, Terraform plan visibility, approvals and gated production releases.
• Create reusable CI/CD templates for application, data and infrastructure teams.
• Automate deployment, smoke testing, rollback and release processes.

DevSecOps, Governance and Compliance

• Integrate SAST, SCA, secret scanning, container and infrastructure security tools into CI/CD pipelines.
• Define vulnerability thresholds and promotion policies.
• Implement Azure Policy, tagging, encryption, private-endpoint and diagnostic-logging guardrails in accordance with applicable security, regulatory and internal requirements.
• Work with Security and Infrastructure teams to embed secure-by-default practices across the platform.
• Support cloud controls aligned with applicable financial-services regulatory, governance, security and operational requirements.

Reliability, Observability and Cost Optimisation

• Implement monitoring, logging, alerting and operational dashboards using Azure Monitor, Log Analytics, Grafana and related tools.
• Improve platform availability, resilience, disaster recovery and incident response.
• Participate in troubleshooting, root-cause analysis, post-incident reviews and continuous improvement.
• Develop cost-optimisation practices including rightsizing, autoscaling, non-production auto-shutdown and storage lifecycle management.
• Improve deployment resilience, rollback strategies and operational runbooks.

Collaboration and Technical Leadership

• Partner with application, data, security, infrastructure and engineering teams.
• Coach engineers on Terraform, CI/CD, cloud architecture and production-readiness practices.
• Review and improve Terraform configurations, pipeline definitions and technical designs.
• Document platform patterns, standards, runbooks and implementation guides.
• Contribute to technical strategy and the continued modernisation of Dymon’s engineering platform.

Requirements

• 10-15 years of experience in DevOps, Cloud Engineering, Platform Engineering or Site Reliability Engineering.
• Strong hands-on experience with Microsoft Azure.
• Demonstrated experience designing and implementing Terraform modules and multi-environment infrastructure.
• Strong experience building CI/CD pipelines using GitLab, Azure DevOps, GitHub Actions, Jenkins or similar tools.
• Good understanding of Azure networking, including VNets, NSGs, private endpoints, VPN and ExpressRoute.
• Experience with Azure RBAC, managed identities, Key Vault, Azure Policy, Azure Monitor and Log Analytics.
• Proficiency in at least one scripting language, such as Python, PowerShell or Bash.
• Practical experience with DevSecOps, including SAST, SCA, secret scanning, container or IaC security.
• Strong troubleshooting and debugging skills across cloud infrastructure, pipelines and application deployments.
• Excellent written and verbal communication skills.
• Ability to work effectively with technical and non-technical stakeholders.

The core technical profile is based on the existing Azure Cloud Engineer requirements, which emphasise Terraform, GitLab CI/CD, Azure networking, DevSecOps, monitoring and cross-team enablement.

Desirable Experience

• Azure landing zones and enterprise-scale cloud architecture.
• Kubernetes, Docker or cloud-native application platforms.
• Databricks, Azure Data Factory, Kafka, Spark or other data-platform technologies.
• Hybrid cloud or on-premises migration projects.
• Financial services, asset management, hedge funds or other regulated environments, with an understanding of applicable regulatory and control requirements.
• Cloud security, identity governance, disaster recovery or FinOps.