Azure & Devops Engineer (AVP)

As an Azure & DevOps Engineer, you will design, engineer, and automate Azure infrastructure supporting a strategic End User Computing transformation programme. You will build secure, scalable, and operationally ready Cloud VDI infrastructure across APAC, leveraging Azure, Infrastructure as Code, DevOps automation, and enterprise security controls within a regulated banking environment.

What You'll Do and How You'll Succeed

Azure Infrastructure & Networking

• Design and implement Azure landing zone-aligned infrastructure for Cloud VDI across APAC regions.
• Engineer Azure VNets, Cloud PC subnets, IP address plans, NSGs, route tables, and disaster recovery capabilities.
• Design connectivity between Cloud PCs, Azure services, on-premises data centres, and enterprise applications.
• Integrate Cloud VDI networks with hub-and-spoke architectures, Azure Virtual WAN, ExpressRoute, and enterprise security services.
• Implement hybrid DNS solutions using Azure DNS Private Resolver, corporate DNS forwarders, and private DNS zones.
• Define and validate firewall, proxy, TLS inspection, and service endpoint requirements.
• Configure and support Azure Network Connections, including health validation and troubleshooting.

Infrastructure as Code & DevOps

• Develop secure, reusable, and version-controlled Terraform modules.
• Implement Terraform remote state management, environment separation, resource imports, and recovery processes.
• Design and maintain Azure DevOps Repos and YAML pipelines using reusable templates, approvals, service connections, and deployment gates.
• Integrate validation, policy enforcement, security scanning, and deployment controls into CI/CD pipelines.
• Support Git workflows, pull requests, code reviews, release management, and Infrastructure as Code testing.

Security, Governance & Monitoring

• Implement Azure Policy, resource tagging, resource locks, RBAC, managed identities, and governance controls.
• Configure Azure Monitor, Log Analytics, Network Watcher, Connection Monitor, KQL dashboards, and alerting.
• Implement DevSecOps controls using tools such as Checkov, TFLint, tfsec, Pester, or equivalent.
• Ensure infrastructure aligns with enterprise security, compliance, and operational standards.

Automation & Operational Readiness

• Automate validation, reporting, and operational processes using PowerShell, Python, Microsoft Graph API, and Azure native services.
• Design for resilience through repeatable infrastructure deployment and disaster recovery processes.
• Produce low-level designs, build guides, runbooks, as-built documentation, and operational handover material.
• Support production readiness, deployment, troubleshooting, rollback, and post-implementation validation activities.

We'd Love to Hear From You If...

Experience

• You have 10+ years of IT experience with hands-on Azure infrastructure, networking, automation, and production implementation experience.
• You have strong experience delivering Azure infrastructure through Terraform and Azure DevOps.
• You have experience with large-scale, multi-region cloud transformation programmes.
• You have experience operating within banking, financial services, or other regulated enterprise environments.
• You have experience working across distributed APAC infrastructure, network, security, and operations teams.

Technical Expertise

• You have advanced Terraform expertise including reusable modules, remote state management, environment promotion, imports, and troubleshooting.
• You have strong Azure DevOps experience across Repos, YAML Pipelines, service connections, approvals, environments, and reusable templates.
• You have enterprise Azure networking expertise covering VNets, subnets, NSGs, UDRs, Virtual WAN, ExpressRoute, VPN, BGP, and hybrid connectivity.
• You have hands-on experience with Azure Firewall, NAT Gateway, Private Link, Private Endpoints, Azure DNS Private Resolver, and private DNS zones.
• You have knowledge of Azure landing zones, management groups, subscriptions, Azure Policy, tagging, and governance.
• You have strong knowledge of Microsoft Entra ID, Azure RBAC, Managed Identities, Privileged Identity Management, and Key Vault.
• You have experience with Azure Monitor, Log Analytics, Network Watcher, diagnostic settings, and KQL.
• You have strong PowerShell skills and working knowledge of Python or similar automation languages.
• You have experience implementing DevSecOps controls using Checkov, TFLint, tfsec, Pester, or equivalent tools.
• You have the ability to translate architecture into detailed designs, implementation plans, production-grade code, and operational documentation.
• You have experience with Cloud VDI, Microsoft Intune, Azure Virtual Desktop, Citrix migration, Azure Functions, Logic Apps, Automation Accounts, SASE, ServiceNow integration, or enterprise endpoint services (preferred).

Ways of Working

• You communicate effectively with technical and non-technical stakeholders.
• You collaborate across infrastructure, security, networking, operations, and project teams.
• You balance operational stability with automation, scalability, and continuous improvement.
• You take a structured approach to governance, risk management, and operational readiness.
• You perform well in complex, large-scale transformation programmes within regulated environments.