Senior Azure Platform Engineer: Secure, Self-Service AI

CMC-APAC PRIVATE LIMITED

Singapore

On-site

SGD 180,000 - 240,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

CMC-APAC PRIVATE LIMITED is seeking a Senior Cloud Platform Engineer to build and scale our Digital Factory Platform on Microsoft Azure, with practical AI literacy. The role focuses on reusable platform capabilities across Azure infrastructure, IaC, CI/CD, DevSecOps, identity and access, observability, FinOps, and compliance automation.

You will design and operate Azure platform capabilities, develop IaC, and build self-service paths for provisioning, deployments, and tooling.

Qualifications

10+ years of hands-on engineering experience designing, building and operating Microsoft Azure infrastructure in enterprise or regulated environments.
Strong hands-on experience with Azure Landing Zones, Azure Policy, Azure Container Apps, App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud, and Azure Cost Management.
Hands-on experience operating within Government Commercial Cloud (GCC) environments, including security, compliance, identity, networking, governance, and operational controls.

Responsibilities

Design, build, and operate Azure platform capabilities across sandbox, QA, UAT, and production environments.
Develop reusable Infrastructure as Code (IaC) using Azure Bicep, Terraform, or equivalent tools.
Build self-service golden paths for environment provisioning, application templates, deployments, access requests, and approved developer tooling.
Design and maintain CI/CD pipelines using Azure DevOps, GitHub, ShipHATS, or equivalent platforms.
Embed security and compliance controls through policy-as-code, automated security checks, quality gates, and platform guardrails.
Harden AI-generated and experimental applications into production-ready MVPs through secure architecture, containerisation, API management, monitoring, and deployment standards.
Implement identity and access controls using Microsoft Entra ID, RBAC, PIM, Conditional Access, and least-privilege practices.
Develop observability capabilities using Azure Monitor, Log Analytics, dashboards, alerts, and platform health metrics.
Support FinOps and TCO transparency through tagging, budget alerts, cost allocation, token-cost tracking, and showback reporting.
Secure and operate Azure-based AI/ML platform services, including access controls, networking, monitoring, and production-readiness controls.
Collaborate with developers, Product Owners, Security, Audit, Finance, and leadership to ensure platform capabilities meet governance requirements.
Develop reusable engineering patterns, templates, operating procedures, and platform documentation.
Continuously improve platform capabilities based on adoption, operational metrics, and product-team feedback.