Cloud Engineer (12-month Contract)

Key Responsibilities

• Address and close findings identified through cloud security assessments, vulnerability scans, and audits, while tracking remediation progress and maintaining clear evidence of resolution.
• Strengthen and secure Azure configurations in line with established standards across compute, storage, networking, key management, and logging.
• Implement Azure Policy, tagging, and governance controls across subscriptions and management groups. Review RBAC and privileged access assignments and remove outdated or unused resources.
• Build Azure landing zone components based on the approved architecture, including subscription and resource group structures, spoke VNets, subnets, route tables, security groups, private endpoints, and private DNS zones.
• Set up hybrid connectivity using VPN Gateway, ExpressRoute, and network peering, while implementing firewall rules aligned with the agreed network segmentation and business requirements.
• Use Infrastructure as Code where appropriate to deploy landing zone components in a consistent, scalable, and repeatable manner.
• Evaluate applications planned for cloud migration, identifying key dependencies, connectivity needs, data flows, and potential technical constraints.
• Deliver migration activities to Azure infrastructure and platform services, covering environment build, data migration, testing, cutover, and rollback, while coordinating with application, Windows, and Linux teams.
• Ensure migrated workloads meet required standards for performance, resilience, backup, and monitoring. Configure logging and alerting for appropriate security visibility and support the decommissioning of legacy infrastructure following approval.
• Maintain comprehensive as-built documentation and operational runbooks, follow established change management and security standards, ensure rollback procedures are tested, and conduct structured knowledge transfer with the permanent team.

Requirements

• 5+ years of hands-on experience in Azure engineering, with proven involvement in cloud migration, remediation, or infrastructure transformation projects.
• Demonstrated ability to implement solutions based on an established architecture while adhering to technical standards and formal change management processes.
• Strong working knowledge of core Azure services, including compute, storage, networking, Azure Policy, RBAC, and resource governance.
• Solid Azure networking experience across virtual networks, subnets, security groups, route tables, private endpoints, private DNS, VPN Gateway, and ExpressRoute.
• Experience with identity and secrets management, including Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities.
• Hands-on experience with Infrastructure as Code and automation tools such as Terraform or Bicep, as well as PowerShell, Azure CLI, and CI/CD pipelines.
• Familiarity with Azure migration technologies, including Azure Migrate, Site Recovery, backup and replication solutions, and application dependency mapping.
• Experience with operational and monitoring tools such as Azure Monitor, Log Analytics, alerting, and cloud cost management.
• Experience working in regulated or security-sensitive environments, with an understanding of least-privilege access, controlled privileged access, and strict data-handling requirements. Financial services experience is a plus.
• Willingness to work on-site in Singapore and support planned out-of-hours migration or cutover activities. Strong documentation discipline and the ability to complete required background screening and third-party access checks are also expected.

Application

Dear Applicant,

If you or someone you know is interested, please send the CV directly to View email address on mycareersfuture.gov.sg (most preferred, as I may overlook some CVs due to the high volume).

Please note that visa sponsorship is not available at this time.