Cloud Engineer

Total eBiz Solutions; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Total eBiz Solutions in Singapore is seeking a senior Azure-focused platform engineer to design, build and operate cloud capabilities across multiple environments, and to enforce policy-based security and governance. You will lead IaC template development, CI/CD automation, and secure-by-default architectures while enabling self-service patterns for product teams.

You will collaborate with security, audit, finance and leadership to drive cost transparency, reliability and business outcomes,

Qualifications

• 10+ years of hands-on engineering experience designing, building and operating cloud infrastructure on Microsoft Azure in enterprise or regulated environments.
• Deep hands-on experience with Azure services such as Landing Zones, Policy, Container Apps, App Service, API Management, Monitor, Defender for Cloud and Cost Management.
• Experience operating in GCC environments with gov cloud governance, security, compliance, identity, network and controls.
• Extensive IaC experience with Bicep, Terraform or equivalent tools.
• Extensive experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar.
• Strong DevSecOps with automated checks, policy-as-code and compliance controls.
• Identity and access engineering using Microsoft Entra ID, RBAC, Conditional Access, PIM and least-privilege governance.
• Practical AI literacy using AI-assisted development tools to improve delivery and quality.
• Experience securing and operating AI/ML platform services on Azure.
• Knowledge of Active Directory, authentication flows, and hybrid identity concepts.
• Understanding modern authentication standards (SAML, OIDC, OAuth 2.0, JWT) and cloud-native patterns.
• Capability to translate platform architecture into reusable patterns and self-service capabilities.

Responsibilities

• Design, build and operate Azure-based platform capabilities across sandbox, QA, UAT and production environments.
• Develop and maintain IaC templates using Azure Bicep, Terraform or equivalent.
• Build self-service golden paths for product teams, including environment provisioning and deployment patterns.
• Implement CI/CD pipelines using Azure DevOps, GitHub, ShipHATS or equivalent platforms.
• Embed security, reliability and compliance controls into platform workflows through policy-as-code and guardrails.
• Support the hardening of AI-enabled apps with secure-by-default architecture and baseline deployment.
• Implement identity and access controls with Entra ID, RBAC, PIM and least-privilege governance.
• Develop observability using Azure Monitor, Log Analytics and dashboards for cost, health and delivery.
• Support FinOps and cost transparency through tagging and reporting to product owners.
• Collaborate with product owners, developers, security, audit, finance and leadership to align platform with business outcomes.
• Document reusable patterns, operating procedures and platform decisions.

Skills

Azure Platform Engineering

CI/CD

DevSecOps

IaC (Bicep/Terraform)

Security & Compliance

Observability

Identity & Access Management

AI tooling literacy

GitHub Copilot/AI tools

FinOps/Cost management

Tools

Azure DevOps

GitHub

ShipHATS

Azure Bicep

Terraform

Azure OpenAI

Kubernetes

Security scanning

Job description

1. Design, build and operate Azure-based platform capabilities that support the Digital Factory across sandbox, QA, UAT and production environments.
2. Develop and maintain infrastructure-as-code templates using tools such as Azure Bicep, Terraform or equivalent, enabling consistent and repeatable environment provisioning.
3. Build self-service golden paths for product teams, including environment provisioning, application templates, deployment patterns, access requests and approved tooling.
4. Implement CI/CD pipelines using Azure DevOps, GitHub, ShipHATS or equivalent platforms to automate build, test, release, promotion and rollback processes.
5. Embed security, reliability and compliance controls into platform workflows through policy-as-code, automated checks and guardrails.
6. Support the hardening of AI-generated or experimental applications into evaluable MVPs by applying secure-by-default architecture, containerization, API management, monitoring and deployment baselines.
7. Implement identity and access controls using Microsoft Entra ID, role-based access control, Privileged Identity Management, Conditional Access and least-privilege practices.
8. Develop observability capabilities using Azure Monitor, Log Analytics, dashboards and business-relevant platform metrics covering cost, health, delivery, incidents and compliance.
9. Support FinOps and TCO transparency through resource tagging, budget alerts, cost allocation, token-cost tracking and show back reporting to product owners.
10. Collaborate with product owners, developers, security, audit, finance and leadership stakeholders to ensure platform capabilities are practical, governed and aligned to business outcomes.
11. Document reusable patterns, operating procedures and platform decisions to improve adoption, maintainability and knowledge retention.

Required Skills and Experience

1. 10+ years of hands-on engineering experience, including significant experience designing, building, managing and operating cloud infrastructure on Microsoft Azure in enterprise or regulated environments.
2. Deep hands-on experience with Azure platform services such as Azure Landing Zones, Azure Policy, Azure Container Apps, Azure App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Azure Cost Management.
3. Hands-on experience operating in Government Commercial Cloud (GCC) environments, including working within government cloud governance, security, compliance, identity, network and operational controls.
4. Extensive hands-on experience with infrastructure-as-code, automated provisioning and configuration management using Azure Bicep, Terraform or equivalent tools.
5. Extensive experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms, including automated build, test, security scanning, deployment promotion, rollback and release quality gates.
6. Strong hands-on experience applying DevSecOps practices and implementing platform guardrails, including secure software delivery, automated quality checks, secrets management, vulnerability scanning, policy-as-code and compliance controls.
7. Strong hands-on experience in identity and access engineering using Microsoft Entra ID, RBAC, Conditional Access, PIM, access reviews and least-privilege access governance.
8. Practical AI literacy and experience using AI-assisted development tools such as Claude, GitHub Copilot, Microsoft Copilot or equivalent tools to improve software delivery, code quality, documentation, testing or developer productivity.
9. Experience integrating, securing and operating AI/ML platform services on Azure, including access controls, network security, service configuration, monitoring and production-readiness controls for AI-enabled applications.
10. Working knowledge of Active Directory and enterprise identity integration concepts, including directory services, group-based access, authentication flows and hybrid identity considerations.
11. Working knowledge of modern authentication and authorization standards, including SAML, OpenID Connect, OAuth 2.0, JWT and related enterprise application integration patterns.
12. Working knowledge of containerization, APIs, cloud-native application patterns and production-readiness practices.
13. Experience supporting at least one production cloud-native application or shared platform capability, with responsibility for reliability, monitoring, deployment or operational support.
14. Ability to translate platform architecture into reusable engineering patterns, templates, developer self-service capabilities and platform services that product teams can consume with minimal friction.
15. Strong documentation and communication skills, with the ability to explain technical concepts to both engineering and non-technical stakeholders.
16. Comfortable working in an agile, product-oriented environment where platform capabilities are built incrementally and improved through adoption feedback.

Preferred Skills

1. Experience with AI application platforms, Azure OpenAI, Microsoft Fabric, Synapse, data products or AI governance patterns.
2. Experience building developer portals, internal platforms, platform APIs, self-service workflows or golden-path engineering templates.
3. Familiarity with public sector cloud environments, government security requirements or regulated enterprise environments.
4. Experience with observability, SRE practices, incident response automation, Microsoft Sentinel, alert routing and service health dashboards.
5. Understanding of FinOps practices, cloud cost optimization, TCO modelling and cost accountability mechanisms.
6. Exposure to tools such as Jira, Confluence, GitHub, Azure DevOps, ShipHATS, Copilot or other modern engineering productivity tools.

“By proceeding with the job application, you are deemed to have read and acknowledged our Job Applicant Privacy Policy and consented to us using the personal data you shared for the purpose stated in the said policy.”