Editorial summary

The company is seeking a Cloud Engineer for a 12-month contract to enhance and secure Azure cloud environments. The role involves addressing security findings, implementing Azure policies, and managing configurations across compute, storage, networking, and access controls. Key requirements include experience with cloud security assessments, Azure governance, and resource management. The position offers a monthly salary of 12,000.

This summary is AI-generated and may contain inaccuracies. Please refer to the full job description below.

Job description

[This job id 27246 first appeared in Job-Q.com on 24 Aug 2026]

Key Responsibilities

• Address and close findings identified through cloud security assessments, vulnerability scans, and audits, while tracking remediation progress and maintaining clear evidence of resolution.
• Strengthen and secure Azure configurations in line with established standards across compute, storage, networking, key management, and logging.
• Implement Azure Policy, tagging, and governance controls across subscriptions and management groups. Review RBAC and privileged access assignments and remove outdated or unused resources.
• Build Azure landing zone components based on the approved architecture, including subscription and resource group structures, spoke VNets, subnets, route tables, security groups, private endpoints, and private DNS zones.
• Set up hybrid connectivity using VPN Gateway, ExpressRoute, and network peering, while implementing firewall rules aligned with the agreed network segmentation and business requirements.
• Use Infrastructure as Code where appropriate to deploy landing zone components in a consistent, scalable, and repeatable manner.
• Evaluate applications planned for cloud migration, identifying key dependencies, connectivity needs, data flows, and potential technical constraints.
• Deliver migration activities to Azure infrastructure and platform services, covering environment build, data migration, testing, cutover, and rollback, while coordinating with application, Windows, and Linux teams.
• Ensure migrated workloads meet required standards for performance, resilience, backup, and monitoring. Configure logging and alerting for appropriate security visibility and support the decommissioning of legacy infrastructure following approval.
• Maintain comprehensive as-built documentation and operational runbooks, follow established change management and security standards, ensure rollback procedures are tested, and conduct structured knowledge transfer with the permanent team.

Requirements

• 5+ years of hands-on experience in Azure engineering, with proven involvement in cloud migration, remediation, or infrastructure transformation projects.
• Demonstrated ability to implement solutions based on an established architecture while adhering to technical standards and formal change management processes.
• Strong working knowledge of core Azure services, including compute, storage, networking, Azure Policy, RBAC, and resource governance.
• Solid Azure networking experience across virtual networks, subnets, security groups, route tables, private endpoints, private DNS, VPN Gateway, and ExpressRoute.
• Experience with identity and secrets management, including Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities.
• Hands-on experience with Infrastructure as Code and automation tools such as Terraform or Bicep, as well as PowerShell, Azure CLI, and CI/CD pipelines.
• Familiarity with Azure migration technologies, including Azure Migrate, Site Recovery, backup and replication solutions, and application dependency mapping.
• Experience with operational and monitoring tools such as Azure Monitor, Log Analytics, alerting, and cloud cost management.
• Experience working in regulated or security-sensitive environments, with an understanding of least-privilege access, controlled privileged access, and strict data-handling requirements. Financial services experience is a plus.
• Willingness to work on-site in Singapore and support planned out-of-hours migration or cutover activities. Strong documentation discipline and the ability to complete required background screening and third-party access checks are also expected.

Application

Dear Applicant,

If you or someone you know is interested, please send the CV directly to (most preferred, as I may overlook some CVs due to the high volume).

Please note that visa sponsorship is not available at this time.

Scam prevention reminder: You should not make any pre-payment when applying for any job.

Illegal practices reminder: It is illegal for recruiter to collect payment (kickback) from the worker https://www.mom.gov.sg/-/media/mom/documents/publications/foreign-workers/what-are-kickbacks.pdf