Senior Azure Infrastructure Engineer — Terraform & Azure DevOps

Senior Azure Infrastructure Engineer — Terraform & Azure DevOps

Location: Singapore

About the Role

Join a strategic End User Computing transformation supporting the migration from on-premises Citrix VDI to a cloud-based desktop service across APAC.

You will design, build and automate the customer-managed Azure infrastructure supporting secure, scalable cloud desktops in a regulated banking environment. This hands-on role covers networking, Infrastructure as Code, CI/CD, security, monitoring and production delivery.

Strong Azure infrastructure engineers are encouraged to apply. Previous AVD, Windows 365 or Citrix migration experience is an advantage, not a requirement.

Key Responsibilities

• Design and deploy Azure infrastructure aligned with enterprise landing-zone standards.
• Engineer VNets, subnets, IP addressing, NSGs, route tables and hybrid connectivity.
• Integrate Azure networks with hub-and-spoke or Virtual WAN architectures, ExpressRoute, VPNs and corporate applications.
• Configure hybrid DNS, private endpoints, Azure Firewall, NAT Gateway and approved internet-egress services.
• Develop reusable Terraform modules and manage remote state, environment separation, imports and recovery.
• Build Azure DevOps YAML pipelines with validation, security scanning, plan reviews, approvals and controlled deployments.
• Implement Azure Policy, RBAC, managed identities, tagging and other governance controls.
• Configure Azure Monitor, Log Analytics, Network Watcher, KQL dashboards and alerts.
• Automate infrastructure validation and operational tasks using PowerShell, Python and Microsoft Graph API.
• Support resilience planning, disaster recovery, production changes, troubleshooting and rollback.
• Produce detailed designs, deployment guides, runbooks and operational handover documentation.
• Collaborate with infrastructure, network, security and operations teams across APAC.

Requirements

• At least 10 years of IT experience, including substantial hands-on Azure infrastructure, networking, automation and production implementation.
• Advanced Terraform skills, including reusable modules, remote state, environment promotion, imports and troubleshooting.
• Strong Azure DevOps experience, covering Repos, YAML pipelines, service connections, approvals and reusable templates.
• Enterprise Azure networking experience covering VNets, NSGs, UDRs, ExpressRoute, VPN, BGP and hybrid connectivity.
• Hands-on knowledge of Azure Firewall, NAT Gateway, Private Link, private endpoints and hybrid DNS.
• Experience with Azure landing zones, management groups, subscriptions, Azure Policy and governance.
• Strong understanding of Entra ID, RBAC, managed identities, Privileged Identity Management and Key Vault.
• Experience with Azure monitoring, logging and KQL.
• Strong PowerShell skills and working knowledge of Python or a comparable automation language.
• Familiarity with Git, pull requests, code reviews and Infrastructure as Code testing.
• Experience with DevSecOps tools such as Checkov, TFLint, tfsec, Pester or equivalent.
• Ability to deliver production-ready infrastructure, implementation plans and clear support documentation.

Added Advantages

• Azure Virtual Desktop implementation or Windows 365 Enterprise.
• Azure Network Connection configuration and Cloud PC provisioning.
• Citrix-to-Azure VDI migration.
• Microsoft Intune and Microsoft Graph API.
• Azure Functions, Logic Apps and Automation Accounts.
• SASE, secure web gateways or enterprise proxies.
• ServiceNow and formal change-management processes.
• Banking, financial services or regulated enterprise experience.
• Multi-region Azure delivery across APAC.

Preferred Certifications

AZ-700, AZ-104, AZ-400, AZ-500 and/or HashiCorp Certified: Terraform Associate.

Registration No.: R25156061

EA No.: 11C3373