Senior Azure Platform Engineer: Cloud, Security & FinOps

Total eBiz Solutions; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Total eBiz Solutions in Singapore is seeking a senior Azure-focused platform engineer to design, build and operate cloud capabilities across multiple environments, and to enforce policy-based security and governance. You will lead IaC template development, CI/CD automation, and secure-by-default architectures while enabling self-service patterns for product teams.

You will collaborate with security, audit, finance and leadership to drive cost transparency, reliability and business outcomes,

Qualifications

• 10+ years of hands-on engineering experience designing, building and operating cloud infrastructure on Microsoft Azure in enterprise or regulated environments.
• Deep hands-on experience with Azure services such as Landing Zones, Policy, Container Apps, App Service, API Management, Monitor, Defender for Cloud and Cost Management.
• Experience operating in GCC environments with gov cloud governance, security, compliance, identity, network and controls.
• Extensive IaC experience with Bicep, Terraform or equivalent tools.
• Extensive experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar.
• Strong DevSecOps with automated checks, policy-as-code and compliance controls.
• Identity and access engineering using Microsoft Entra ID, RBAC, Conditional Access, PIM and least-privilege governance.
• Practical AI literacy using AI-assisted development tools to improve delivery and quality.
• Experience securing and operating AI/ML platform services on Azure.
• Knowledge of Active Directory, authentication flows, and hybrid identity concepts.
• Understanding modern authentication standards (SAML, OIDC, OAuth 2.0, JWT) and cloud-native patterns.
• Capability to translate platform architecture into reusable patterns and self-service capabilities.

Responsibilities

• Design, build and operate Azure-based platform capabilities across sandbox, QA, UAT and production environments.
• Develop and maintain IaC templates using Azure Bicep, Terraform or equivalent.
• Build self-service golden paths for product teams, including environment provisioning and deployment patterns.
• Implement CI/CD pipelines using Azure DevOps, GitHub, ShipHATS or equivalent platforms.
• Embed security, reliability and compliance controls into platform workflows through policy-as-code and guardrails.
• Support the hardening of AI-enabled apps with secure-by-default architecture and baseline deployment.
• Implement identity and access controls with Entra ID, RBAC, PIM and least-privilege governance.
• Develop observability using Azure Monitor, Log Analytics and dashboards for cost, health and delivery.
• Support FinOps and cost transparency through tagging and reporting to product owners.
• Collaborate with product owners, developers, security, audit, finance and leadership to align platform with business outcomes.
• Document reusable patterns, operating procedures and platform decisions.

Skills

Azure Platform Engineering

CI/CD

DevSecOps

IaC (Bicep/Terraform)

Security & Compliance

Observability

Identity & Access Management

AI tooling literacy

GitHub Copilot/AI tools

FinOps/Cost management

Tools

Azure DevOps

GitHub

ShipHATS

Azure Bicep

Terraform

Azure OpenAI

Kubernetes

Security scanning

Job description

Total eBiz Solutions in Singapore is seeking a senior Azure-focused platform engineer to design, build and operate cloud capabilities across multiple environments, and to enforce policy-based security and governance. You will lead IaC template development, CI/CD automation, and secure-by-default architectures while enabling self-service patterns for product teams.

You will collaborate with security, audit, finance and leadership to drive cost transparency, reliability and business outcomes,