Cloud Engineer (12-month Contract)

Key Responsibilities • Address and close findings identified through cloud security assessments, vulnerability scans, and audits, while tracking remediation progress and maintaining clear evidence of resolution. • Strengthen and secure Azure configurations in line with established standards across compute, storage, networking, key management, and logging. • Implement Azure Policy, tagging, and governance controls across subscriptions and management groups. Review RBAC and privileged access assignments and remove outdated or unused resources. • Build Azure landing zone components based on the approved architecture, including subscription and resource group structures, spoke VNets, subnets, route tables, security groups, private endpoints, and private DNS zones. • Set up hybrid connectivity using VPN Gateway, ExpressRoute, and network peering, while implementing firewall rules aligned with the agreed network segmentation and business requirements. • Use Infrastructure as Code where appropriate to deploy landing zone components in a consistent, scalable, and repeatable manner. • Evaluate applications planned for cloud migration, identifying key dependencies, connectivity needs, data flows, and potential technical constraints. • Deliver migration activities to Azure infrastructure and platform services, covering environment build, data migration, testing, cutover, and rollback, while coordinating with application, Windows, and Linux teams. • Ensure migrated workloads meet required standards for performance, resilience, backup, and monitoring. Configure logging and alerting for appropriate security visibility and support the decommissioning of legacy infrastructure following approval. • Maintain comprehensive as-built documentation and operational runbooks, follow established change management and security standards, ensure rollback procedures are tested, and conduct structured knowledge transfer with the permanent team. Requirements • 5+ years of hands-on experience in Azure engineering, with proven involvement in cloud migration, remediation, or infrastructure transformation projects. • Demonstrated ability to implement solutions based on an established architecture while adhering to technical standards and formal change management processes. • Strong working knowledge of core Azure services, including compute, storage, networking, Azure Policy, RBAC, and resource governance. • Solid Azure networking experience across virtual networks, subnets, security groups, route tables, private endpoints, private DNS, VPN Gateway, and ExpressRoute. • Experience with identity and secrets management, including Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities. • Hands-on experience with Infrastructure as Code and automation tools such as Terraform or Bicep, as well as PowerShell, Azure CLI, and CI/CD pipelines. • Familiarity with Azure migration technologies, including Azure Migrate, Site Recovery, backup and replication solutions, and application dependency mapping. • Experience with operational and monitoring tools such as Azure Monitor, Log Analytics, alerting, and cloud cost management. • Experience working in regulated or security-sensitive environments, with an understanding of least-privilege access, controlled privileged access, and strict data-handling requirements. Financial services experience is a plus. • Willingness to work on-site in Singapore and support planned out-of-hours migration or cutover activities. Strong documentation discipline and the ability to complete required background screening and third-party access checks are also expected. Application Dear Applicant, If you or someone you know is interested, please send the CV directly to Ryan.Nguyen@evolutionjobs.sg (most preferred, as I may overlook some CVs due to the high volume). Please note that visa sponsorship is not available at this time.