Kopi Recruit Pte Ltd Hiring! Full Time Azure Cloud Engineer in , Earn up to SGD 12,500 - Ricebowl

Role Summary

The Cloud Engineer (L3) is a senior technical escalation and engineering role responsible for complex Azure operations, platform reliability, automation, governance, security, networking, and cost optimization across enterprise-scale environments.

The role leads deep troubleshooting, reviews platform architecture, improves landing zone standards, mentors L1/L2 engineers, and supports 24x7 operations including customer onsite duties where required.

Key Responsibilities

Advanced Azure Operations: Lead L3 support for Azure VMs, VNets, Load Balancer, App Services, AKS, Storage, Key Vault, SQL/Managed Instance, Backup, ASR, Application Gateway, Azure Firewall, and related services.

Incident & Problem Management: Own complex escalations, major incident troubleshooting, RCA, corrective/preventive actions, runbook updates, and long-term problem resolution.

Landing Zone & Architecture: Review and improve Azure landing zones, subscription structure, management groups, network topology, identity model, logging, security boundaries, and workload onboarding patterns.

IaC & Automation: Lead Terraform/Bicep/ARM module development, CI/CD integration, deployment standards, automation scripts, and governance-as-code improvements.

Governance & Security: Define and maintain RBAC, PIM, Azure Policy, tagging, naming standards, Defender for Cloud,

Sentinel use cases, vulnerability remediation, and audit evidence.

Networking & Connectivity: Design and troubleshoot VNets, NSGs, route tables, Azure Firewall, Private Endpoints, Private DNS, App Gateway/WAF, ExpressRoute, VPN, Private Link, and hub-spoke architectures.

Monitoring, DR & Reliability: Improve Azure Monitor, Log Analytics, KQL, Application Insights, alerts, dashboards, backup,

ASR, RTO/RPO validation, and recovery runbooks.

Cost & Performance Optimization: Lead rightsizing, utilization reviews, reserved instances, savings plans, budgeting, showback/chargeback, and cost control recommendations.

Technical Leadership: Mentor L1/L2 engineers, review technical work, lead small/medium cloud improvement initiatives, and produce clear technical documentation.

Required Qualifications & Skills

6-9 years of infrastructure, cloud, platform engineering, or operations experience, with strong hands-on Microsoft Azure expertise.

Deep knowledge of Azure compute, storage, networking, identity, monitoring, backup/DR, security, and governance services.

Proven L3 troubleshooting experience across compute, storage, network, identity, security, platform, and application layers.

Hands-on experience with Terraform, Bicep, ARM templates, PowerShell, Python, Azure CLI, Git, Azure DevOps, or GitHub Actions.

Strong understanding of Entra ID, RBAC, PIM, managed identities, least privilege, policy-driven governance, and secure baselines.

Experience with Defender for Cloud, Sentinel, vulnerability remediation, Log Analytics, KQL, dashboards, alerts, and audit/compliance reporting.

Working knowledge of AKS, App Gateway/WAF, Private Link, ExpressRoute/VPN, Azure Backup, ASR, landing zones, and

CAF principles.

Able to lead technical discussions, manage escalations, mentor junior engineers, and communicate with customer stakeholders.

Preferred Qualifications

Experience in enterprise, managed services, government, financial services, regulated, or mission-critical Azure environments.

Experience with large-scale landing zone implementation, cloud migration, ITSM processes, and compliance frameworks such

as CIS, ISO 27001, MAS TRM, or NIST.

Experience operating multi-subscription, multi-environment, or hybrid cloud environments.

Preferred Certifications

AZ-104: Microsoft Azure Administrator Associate

AZ-500: Microsoft Azure Security Engineer Associate

AZ-700: Microsoft Azure Network Engineer Associate

AZ-305: Microsoft Azure Solutions Architect Expert

SC-300: Identity and Access Administrator Associate

HashiCorp Terraform Associate; ITIL Foundation or equivalent

Pay: $8,000.00 - $12,500.00 per month

Benefits:

• Additional leave
• Cell phone reimbursement
• Health insurance

Work Location: In person