ASTEK has been providing IT and Engineering solutions for some of the world’s largest industrial and services groups for more than 35 years with 10,000 passionate experts in 22 countries throughout Europe, APAC, Middle East and the Americas.
Currently, we are looking for Cloud Engineer (Senior) which would be based in Singapore.
Responsibilities and requirements:
- Bachelor's degree with at least 3-5 years of relevant hands-on experience in cloud engineering, Azure infrastructure, platform engineering or cloud operations, including senior-level responsibility for production workloads.
- Own the cloud engineering scope required to deliver and operationalise within Group’s Microsoft Azure environment.
- Design, provision, configure and maintain projects’ Azure infrastructure across non-production and production environments, in accordance with approved architecture, security and governance requirements.
- Proficiency in at least one scripting or programming language such as PowerShell, Python, Go or Bash for cloud automation and operational tooling.
- Translate the project’s solution architecture into implementable cloud designs covering subscriptions, resource groups, networking, identity and access, compute, containers, storage, databases, integration services, monitoring, backup and recovery.
- Develop and maintain Infrastructure as Code using Terraform or other approved tooling to ensure that the project environments are repeatable, version-controlled, traceable and recoverable.
- Implement the project’s cloud connectivity and network configuration, including virtual networks, subnets, routing, private endpoints, DNS, firewalls, application gateways and integration with approved hub-and-spoke services.
- Configure role-based access control, managed identities, service principals, secrets and certificates using least-privilege principles and approved access workflows.
- Work closely with the project’s lead engineer, application engineers and DevSecOps engineer to support environment setup, application deployment, integration testing, release readiness and production cutover.
- Perform first-level diagnosis of cloud infrastructure, networking, identity, platform and deployment issues, and coordinate with Infrastructure, network, cybersecurity or other internal stakeholders where privileged access or shared platform ownership is required.
- Review vendor-proposed cloud designs and configurations for alignment with the project architecture.
- Implement monitoring, logging, alerting, backup, recovery, resilience, capacity and cost controls for the project’s Azure resources.
- Support security reviews, vulnerability remediation, operational readiness assessments, disaster recovery exercises and audit evidence preparation for the assigned project.
- Proven experience delivering a specific cloud-native project from environment setup through production deployment and operational handover.
- Strong practical experience with Microsoft Azure, including networking, identity and access, compute, containers, storage, databases, monitoring, security controls, backup, recovery and operational troubleshooting.
- Hands-on experience with Infrastructure as Code, preferably Terraform, and source-control and delivery platforms such as GitHub Actions, Azure DevOps or Jenkins.
- Experience with Azure networking patterns such as hub-and-spoke, private endpoints, DNS, routing, firewalls, application gateways and secure connectivity to internal or external systems.
- Experience with containers and Kubernetes, including cluster integration, configuration, ingress, scaling, observability and deployment troubleshooting.
- Working knowledge of Azure governance, resource policies, tagging, cost management, least-privilege access, secrets management, certificate management and audit requirements.
- Ability to review a vendor-built solution critically, identify cloud infrastructure and operational risks, and influence corrective action without taking over vendor accountability.