Senior Azure Infrastructure Engineer - Terraform & Azure DevOps

Helius Technologies; Singapore; On-site; SGD 150,000 - 200,000; Full time

Job summary

Helius Technologies in Singapore seeks a Senior Azure Infrastructure Engineer to design, build, and automate cloud infrastructure for a VDI migration in a regulated APAC banking environment. You will craft Terraform modules, manage remote state, implement Azure policies, and maintain security controls while delivering production-ready environments.

The role covers VNets, ExpressRoute, hybrid DNS, private endpoints, and advanced monitoring.

Qualifications

• At least 10 years of IT experience with Azure infrastructure and production delivery.
• Advanced Terraform with modules, remote state and environment promotion.
• Azure DevOps experience: Repos, YAML pipelines, service connections and approvals.
• Enterprise Azure networking: VNets, NSGs, ExpressRoute, VPN, hybrid connectivity.
• Azure Firewall, NAT Gateway, Private Link, private endpoints, hybrid DNS.
• Azure landing zones, management groups, subscriptions, policy and governance.
• Entra ID, RBAC, managed identities, Privileged Identity Management and Key Vault.
• Monitoring/logging: Azure Monitor, Log Analytics, KQL.
• PowerShell and Python for automation.
• Git, code reviews; IaC testing; DevSecOps tools: Checkov, TFLint, tfsec, Pester.
• Azure Virtual Desktop, Windows 365 Enterprise, Citrix-to-Azure VDI, Graph API, Functions, Logic Apps, Automation Accounts.

Responsibilities

• Design and deploy Azure infrastructure aligned with enterprise landing-zone standards.
• Engineer VNets, subnets, IP addressing, NSGs, route tables and hybrid connectivity.
• Integrate Azure networks with hub-and-spoke or Virtual WAN architectures, ExpressRoute, VPNs and corporate applications.
• Configure hybrid DNS, private endpoints, Azure Firewall, NAT Gateway and approved internet-egress services.
• Develop reusable Terraform modules and manage remote state, environment separation, imports and recovery.
• Build Azure DevOps YAML pipelines with validation, security scanning, plan reviews, approvals and controlled deployments.
• Implement Azure Policy, RBAC, managed identities, tagging and other governance controls.
• Configure Azure Monitor, Log Analytics, Network Watcher, KQL dashboards and alerts.
• Automate infrastructure validation and operational tasks using PowerShell, Python and Microsoft Graph API.
• Support resilience planning, disaster recovery, production changes, troubleshooting and rollback.
• Produce detailed designs, deployment guides, runbooks and operational handover documentation.
• Collaborate with infrastructure, network, security and operations teams across APAC.

Skills

Azure infrastructure

Networking

Automation

Terraform

Azure DevOps

Azure networking

Azure Firewall

Private Endpoints

NAT Gateway

Hybrid DNS

Azure landing zones

Azure Policy

Entra ID

RBAC

Managed Identities

Privileged Identity Management

Key Vault

KQL

PowerShell

Python

Git

IaC testing

Checkov

TFLint

tfsec

Pester

Azure Virtual Desktop

Windows 365 Enterprise

Citrix-to-Azure VDI

Microsoft Graph API

Azure Functions

Logic Apps

Automation Accounts

SASE

ServiceNow

Banking / regulated environment

Multi-region APAC deployment

AZ-700

AZ-104

AZ-400

AZ-500

Tools

Terraform modules

Job description

Senior Azure Infrastructure Engineer - Terraform & Azure DevOps

Location: Singapore

About the Role

Join a strategic End User Computing transformation supporting the migration from on-premises Citrix VDI to a cloud-based desktop service across APAC. You will design, build and automate the customer-managed Azure infrastructure supporting secure, scalable cloud desktops in a regulated banking environment. This hands‑on role covers networking, Infrastructure as Code, CI/CD, security, monitoring and production delivery.

Strong Azure infrastructure engineers are encouraged to apply. Previous AVD, Windows 365 or Citrix migration experience is an advantage, not a requirement.

Key Responsibilities

• Design and deploy Azure infrastructure aligned with enterprise landing-zone standards.
• Engineer VNets, subnets, IP addressing, NSGs, route tables and hybrid connectivity.
• Integrate Azure networks with hub-and-spoke or Virtual WAN architectures, ExpressRoute, VPNs and corporate applications.
• Configure hybrid DNS, private endpoints, Azure Firewall, NAT Gateway and approved internet-egress services.
• Develop reusable Terraform modules and manage remote state, environment separation, imports and recovery.
• Build Azure DevOps YAML pipelines with validation, security scanning, plan reviews, approvals and controlled deployments.
• Implement Azure Policy, RBAC, managed identities, tagging and other governance controls.
• Configure Azure Monitor, Log Analytics, Network Watcher, KQL dashboards and alerts.
• Automate infrastructure validation and operational tasks using PowerShell, Python and Microsoft Graph API.
• Support resilience planning, disaster recovery, production changes, troubleshooting and rollback.
• Produce detailed designs, deployment guides, runbooks and operational handover documentation.
• Collaborate with infrastructure, network, security and operations teams across APAC.

Requirements

• At least 10 years of IT experience , including substantial hands‑on Azure infrastructure, networking, automation and production implementation.
• Advanced Terraform skills , including reusable modules, remote state, environment promotion, imports and troubleshooting.
• Strong Azure DevOps experience , covering Repos, YAML pipelines, service connections, approvals and reusable templates.
• Enterprise Azure networking experience covering VNets, NSGs, UDRs, ExpressRoute, VPN, BGP and hybrid connectivity.
• Hands‑on knowledge of Azure Firewall, NAT Gateway, Private Link, private endpoints and hybrid DNS.
• Experience with Azure landing zones, management groups, subscriptions, Azure Policy and governance.
• Strong understanding of Entra ID, RBAC, managed identities, Privileged Identity Management and Key Vault.
• Experience with Azure monitoring, logging and KQL.
• Strong PowerShell skills and working knowledge of Python or a comparable automation language.
• Familiarity with Git, pull requests, code reviews and Infrastructure as Code testing.
• Experience with DevSecOps tools such as Checkov, TFLint, tfsec, Pester or equivalent.
• Ability to deliver production‑ready infrastructure, implementation plans and clear support documentation.

Added Advantages

• Azure Virtual Desktop implementation or Windows 365 Enterprise.
• Azure Network Connection configuration and Cloud PC provisioning.
• Citrix-to-Azure VDI migration.
• Microsoft Intune and Microsoft Graph API.
• Azure Functions, Logic Apps and Automation Accounts.
• SASE, secure web gateways or enterprise proxies.
• ServiceNow and formal change‑management processes.
• Banking, financial services or regulated enterprise experience.
• Multi‑region Azure delivery across APAC.

Preferred Certifications

AZ-700, AZ-104, AZ-400, AZ-500 and/or HashiCorp Certified: Terraform Associate.

Registration No.: R25156061

EA No.: 11C3373