Cloud Engineer

DYMON ASIA CAPITAL (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

DYMON ASIA CAPITAL (SINGAPORE) PTE. LTD. seeks a senior DevOps/Platform Engineer to design, build, and operate the Terraform + GitLab IaC layer underpinning the Azure cloud platform.

You will own the CI/CD toolchain for management groups, subscriptions, networks, and landing zones, embedding DevSecOps into every pipeline. You will implement Terraform modules, manage remote state and environments, and develop reusable GitLab templates to streamline infra and app deployments.

Qualifications

• 5–8 years in DevOps / Platform Engineering, with significant time on Azure.
• Strong hands‑on experience with Terraform on Azure (modules, multi‑env setups, state backends).
• Proven track record building CI/CD pipelines in GitLab (or similar) for infra and applications.

Responsibilities

• Design and implement Terraform modules for Azure resources (management groups, subscriptions, VNets, RBAC).
• Build and maintain GitLab CI/CD pipelines for infra and apps with plan/apply and MR-driven approvals.
• Embed DevSecOps by integrating security scanning and policy checks into pipelines.
• Support reliability, observability and cost optimization across environments.
• Document patterns and coach engineers on Terraform and GitLab templates.

Skills

Terraform on Azure

GitLab CI/CD

Azure networking

Scripting (Python/PowerShell/Bash)

DevSecOps practices

Job description

Role summary

You will be a senior member of theAzure Cloud Team, responsible for designing, building, and operating theCI/CD and Infrastructure‑as‑Code (IaC) layerthat underpins Dymon’s Azure cloud platform. You’ll own theTerraform + GitLabtoolchain for management groups, subscriptions, networks, shared services, and application landing zones, and help embed DevSecOps practices into every pipeline.

Key responsibilities

1. Terraform & environment automation

• Design and implementTerraform modulesfor Azure:
• Management groups, subscriptions, RBAC.
• Hub‑and‑spoke VNets, firewalls, private endpoints.
• Shared services: Key Vault, Log Analytics/Grafana, storage, container apps, data platform components.
• Manageremote state, workspaces, module versioning, and promote changes safely across dev/qa/prod.

2. GitLab CI/CD for infrastructure

• Build and maintainGitLab CI pipelinesfor infra:
• Stages forfmt/validate/plan/apply(non‑prod and gated prod).
• MR‑driven workflows withterraform plancomments, approvals, and controlledapply.
• Createreusable CI templatesso app/data teams can easily consume standard jobs (infra, deploy, smoke tests).

3. Application CI/CD enablement

• Work with app and data teams to:
• Integrate their repos with GitLab CI templates (build, test, deploy).
• Wire deployments into Azure landing zones (App Service / Container Apps / Functions / Databricks, etc.).
• Implementenvironment patterns(Dev/QA/UAT/Prod) aligned to the new subscription and VNet structure.

4. DevSecOps integration

• Integratesecurity scanning toolsinto CI pipelines (e.g. Jfrog Advanced Security, SAST/SCA/IaC scanners).
• Help definepolicies and thresholdsfor blocking promotions based on vulnerability severity.
• Collaborate with Security/Infra to ensure that pipelines enforceguardrails by default(e.g. policy checks, image/IaC scans).

5. Reliability, observability & optimisation

• Integrate pipelines with monitoring/alerting (Azure Monitor, Log Analytics, Grafana) for both infra and apps.
• Contribute tocost optimisation:
• Patterns for auto‑shutdown of non‑prod.
• Standardized scaling and sizing parameters in Terraform modules.
• Participate in incident response and post‑mortems, improving pipeline resilience and roll‑back strategies.

6. Standards, coaching & documentation

• Document CI/CD patterns, Terraform module usage, and “how‑to” guides for engineers.
• Coach developers and other engineers on:
• Using GitLab pipelines and templates.
• Writing safe Terraform changes and reading plan outputs.
• Promote an“infra‑as‑code only” mindset(no manual portal changes for platform resources).

Requirements

Experience

• 5–8 years inDevOps / Platform Engineering, with significant time onAzure.
• Strong hands‑on experience withTerraform on Azure(modules, multi‑env setups, state backends).
• Proven track record buildingCI/CD pipelines in GitLab(or similar) for both infra and applications.

Technical skills

• Solid understanding of Azure basics: VNets, NSGs, private endpoints, VPN/ExpressRoute.
• Solid understanding of Azure basics: RBAC, managed identities, Key Vault, Log Analytics.
• Competent in at least one scripting language (e.g. Python, PowerShell, Bash) for automation/glue code.
• Familiarity withDevSecOps practices: Integrating SAST, SCA/OSS, secret scanning, and/or container/IaC scanning into pipelines.

Ways of working

• Comfortable reviewing and improving others’ Terraform and CI configurations via MRs.
• Strong debugging and troubleshooting skills across infra, pipelines, and cloud services.
• Clear written and verbal communication; able to work with infra, security, and application teams.