Senior Azure Cloud Security Engineer - Migration & Governance

EPAM Systems, Inc.; Singapore; Remote; SGD 90,000 - 160,000; Full time

Job summary

EPAM Systems, Inc. in Singapore is looking for an Azure Cloud Engineer to remediate security gaps, implement governance controls and build landing zone components for workloads migrating from on-premises.

You will deliver infrastructure as code using Terraform or Bicep, configure hybrid connectivity, manage RBAC and Key Vault, and coordinate migration waves with MAS risk requirements. This hands-on role requires strong Azure platform expertise and on-site availability in Singapore.

Qualifications

• Azure engineering delivery experience across remediation and migration in production environments.
• Ability to work within formal change control and MAS technology risk management requirements.
• Experience deploying landing zones, policy, RBAC, and network governance.

Responsibilities

• Remediate cloud security, vulnerability and audit findings with evidence.
• Harden Azure compute, storage, networking, and key management to baselines.
• Implement Azure Policy, tagging, governance guardrails and RBAC.
• Build landing zone components including subscription and resource group structure.
• Configure hybrid connectivity (VPN Gateway, ExpressRoute, peering) per requirements.
• Deliver repeatable builds using IaC and automate where practical.
• Migrate workloads including assessment, data transfer, testing, cutover and rollback.
• Produce as-built docs, runbooks and knowledge transfer per change management.

Skills

Azure engineering

Security remediation

Governance RBAC

IaC automation

Tools

Terraform

Bicep

Azure CLI

PowerShell

Azure Migrate

Job description

EPAM Systems, Inc. in Singapore is looking for an Azure Cloud Engineer to remediate security gaps, implement governance controls and build landing zone components for workloads migrating from on-premises.

You will deliver infrastructure as code using Terraform or Bicep, configure hybrid connectivity, manage RBAC and Key Vault, and coordinate migration waves with MAS risk requirements. This hands-on role requires strong Azure platform expertise and on-site availability in Singapore.