Azure & DevOps Engineer (AVP) – Cloud VDI, APAC

About the role

Thakral One, a Singapore-based consulting and technology services firm, is looking for an Azure & DevOps Engineer (AVP) to design, engineer and automate Azure infrastructure supporting a strategic End User Computing transformation programme. The role builds secure, scalable, operationally ready Cloud VDI infrastructure across APAC, using Azure, Infrastructure as Code, DevOps automation and enterprise security controls within a regulated banking environment.

Key responsibilities

• Design and implement Azure landing-zone-aligned infrastructure for Cloud VDI across APAC regions, including VNets, subnets, IP plans, NSGs, route tables and disaster recovery.
• Connect Cloud PCs, Azure services, on-premises data centres and enterprise applications, integrating with hub-and-spoke architectures, Azure Virtual WAN, ExpressRoute and security services.
• Set up hybrid DNS with Azure DNS Private Resolver, corporate DNS forwarders and private DNS zones.
• Build secure, version-controlled Terraform modules and remote state management, and maintain Azure DevOps repos and YAML pipelines with approvals, service connections and deployment gates.
• Integrate validation, policy enforcement, security scanning and deployment controls into CI/CD pipelines.
• Configure Azure Policy, resource tagging, locks, RBAC, managed identities and governance controls.
• Set up Azure Monitor, Log Analytics, Network Watcher, Connection Monitor, KQL dashboards and alerting, and DevSecOps controls with tools such as Checkov, TFLint, tfsec or Pester.
• Automate validation, reporting and operations with PowerShell, Python, Microsoft Graph API and Azure native services, and produce low-level designs, build guides, runbooks and handover documentation.

Required profile

• 10+ years of IT experience with hands-on Azure infrastructure, networking, automation and production implementation.
• Strong experience delivering Azure infrastructure via Terraform and Azure DevOps, and with large-scale, multi-region cloud transformation programmes.
• Experience in banking, financial services or other regulated environments, and across distributed APAC infrastructure, network, security and operations teams.
• Ability to turn architecture into detailed designs, production-grade code and operational documentation.

Required skills

• Advanced Terraform (modules, remote state, environment promotion, imports)
• Azure DevOps (repos, YAML pipelines, service connections, approvals, reusable templates)
• Azure networking (VNets, NSGs, UDRs, Virtual WAN, ExpressRoute, VPN, BGP, hybrid connectivity)
• Azure Firewall, NAT Gateway, Private Link, Private Endpoints, Azure DNS Private Resolver
• Azure landing zones, management groups, subscriptions, Azure Policy, tagging, governance
• Microsoft Entra ID, RBAC, Managed Identities, PIM, Key Vault
• Azure Monitor, Log Analytics, Network Watcher, diagnostic settings, KQL
• PowerShell, and working knowledge of Python or similar automation languages
• DevSecOps tools such as Checkov, TFLint, tfsec, Pester
• Preferred: Cloud VDI, Microsoft Intune, Azure Virtual Desktop, Citrix migration, Azure Functions, Logic Apps, Automation Accounts, SASE, ServiceNow integration