Cloud / DevOps Engineer - Contract

Job Description:

Design and implement Azure landing-zone-alignedin frastructure for Cloud VDI across required APAC regions.

Engineer Azure VNets, Cloud PC subnets, IP addres splans, NSGs, route tables and capacity for growth, reprovisioning and disaster recovery.

Design connectivity between Cloud VDI Cloud PCs, Azure services, on-premises datacentres and corporate applications.

Integrate Cloud VDI networks with hub-and-spoke or Azure Virtual WAN, ExpressRoute, corporate routing and enterprise securityservices.

Implement hybrid DNS using Azure DNS Private Resolver,corporate DNS forwarders and private DNS zones where required.

Engineer approved internet egress using Azure Firewall, NAT Gateway, secure web gateway or cloud-native SASE.

Define and validate firewall, proxy, TLS inspection and service endpoint requirements for Cloud VDI.

Configure and support Cloud VDI Azure Network Connections, including health validation and troubleshooting.

Develop secure, reusable and version-controlled Terraform modules; use Bicep where required by enterprise standards.

Implement Terraform remote state, environments, version control, resource import and state recovery.

Design and maintain Azure DevOps Repos and YAML pipelines using reusable templates, service connections, environments, approvals and deployment gates.

Integrate Terraform validation, plan review, policychecks, security scanning and controlled apply stages into pipelines.

Implement Azure Policy, tagging, resource locks, diagnostic settings, RBAC, managed identities and governance controls.

Configure Azure Monitor, Log Analytics, NetworkWatcher, Connection Monitor, KQL dashboards and alerting.

Automate validation, reporting and operational activities using PowerShell, Python, Microsoft Graph API and Azure-native services.

Requirements:

Minimum 8-10 years of IT experience with substantial hands-on Azure infrastructure, networking, automation and production implementation experience.

Advanced Terraform experience covering reusable modules, remote state, environment promotion, imports and troubleshooting.

Strong Azure DevOps experience across Repos, YAML Pipelines, service connections, environments, approvals and reusable templates.

Enterprise Azure networking experience covering VNets, subnets, NSGs, UDRs, hub-and-spoke or Virtual WAN, ExpressRoute, VPN, BGP and hybrid connectivity.

Hands-on knowledge of Azure Firewall, NAT Gateway, Private Link, private endpoints, DNS Private Resolver and private DNS zones.

Experience with Azure landing zones, management groups, subscriptions, resource groups, Azure Policy, tagging and governance.

Strong knowledge of Microsoft Entra ID, Azure RBAC, managed identities, Privileged Identity Management and Key Vault.

Experience with Azure Monitor, Log Analytics, diagnostic settings, Network Watcher and KQL.

Strong PowerShell skills and working knowledge of Python or a comparable automation language.

Git workflows, pull requests, code reviews, release management and Infrastructure as Code testing.

DevSecOps experience using Checkov, TFLint, tfsec,Pester or equivalent tooling.

Ability to translate architecture into detailed designs, production-grade code, implementation plans and support documentation.

Hands-on production deployment, troubleshooting, rollback and operational handover experience.