Skip to content

Open nowPosted 4 days ago

Cloud Engineer (Contract)

Dymon Asia11 open roles

Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCloud Engineer (Contract)Dymon Asia · Singapore
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Dymon Asia's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Dymon Asia postings stay open a median of 11 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 4 days ago

Dymon Asia median: 11 days open

The posting

Cloud Engineer (Contract)

Function: IT Infrastructure, Cloud Architecture and Engineering

Engagement Type: Fixed-term contract, full-time

Reports to: Cloud Solutions Architect

About Us

Dymon Asia Capital is a Singapore headquartered multi-strategy hedge fund managing approximately USD 5 billion in assets. Founded in Singapore and built around Asian markets, we run a range of strategies across macro, commodities, and systematic trading. We employ around 350 people across nine offices globally, with Singapore as our headquarters and primary technology hub. We are regulated by the Monetary Authority of Singapore and operate under the regulatory regimes of the markets in which we invest.

The IT Infrastructure function is organized across four pillars: Network, Windows, Linux, and Cloud. It is a lean six-person team of senior engineers, working in close partnership with the Cybersecurity function and with the trading and research desks it supports.

We are engaging Cloud Engineers on contract to deliver two linked programs: remediation of the existing Azure estate against agreed security and configuration standards and build out of the network landing zone to receive application workloads migrating from on premises. You will sit inside the infrastructure team for the duration of the engagement, reporting to the Cloud Solutions Architect.

This is a delivery role, not a design role. Architecture is set by the Cloud Solutions Architect and the Network Architect. You build, test, migrate, document, and hand over against that architecture. Because the team is small, you will need to be self-directed and make progress without daily supervision, while raising design conflicts early rather than working around them. Work is measured on completed, documented, and handed-over outcomes, and knowledge transfer to the permanent team is an explicit deliverable rather than a closing task. Uptime and latency affect trading and research directly, so change discipline and tested rollback are not negotiable.

Key Responsibilities

  • Remediate findings from cloud security posture reviews, vulnerability scans, and audit observations against agreed target-state configuration, tracking progress against a defined backlog with evidence of closure.
  • Harden Azure resource configuration in line with defined baselines, covering storage, compute, networking, key management, and logging.
  • Implement Azure Policy, tagging standards, and governance guardrails across subscriptions and management groups, correct RBAC and privileged role assignments, and clean up legacy and orphaned resources.
  • Build landing zone components to the design provided, including subscription and resource group structure, spoke virtual networks, subnets, route tables, security groups, private endpoints, and private DNS zones.
  • Configure hybrid connectivity components including VPN Gateway, ExpressRoute, and peering, and implement firewall rules to the agreed segmentation model with each rule mapped to a documented business requirement.
  • Deploy landing zone components as infrastructure as code where practical, so the build is repeatable rather than click-configured.
  • Assess candidate applications for migration, capturing dependencies, connectivity requirements, data flows, and constraints.
  • Execute migration waves to Azure infrastructure and platform services, including build, data transfer, testing, cutover, and rollback, coordinating windows with application owners and the Windows and Linux teams.
  • Validate performance, resilience, backup, and monitoring coverage before workloads are accepted as live, configure logging and alerting so telemetry reaches the security operations function, and decommission source infrastructure once formally approved.
  • Produce as-built documentation and runbooks, progress all changes through the firm's change management process with tested rollback, work within the firm's security standards and MAS Technology Risk Management alignment, and provide structured knowledge transfer to the permanent team at agreed milestones.

Requirements

  • 5 or more years of hands-on Azure engineering experience, with demonstrable delivery on migration or remediation programs.
  • Track record of executing to an architecture defined by others, working within established standards and formal change control.
  • Azure core services at operational depth, including compute, storage, networking, Azure Policy, RBAC, and resource governance.
  • Azure networking, including virtual networks, subnets, security groups, route tables, private endpoints, private DNS, VPN Gateway, and ExpressRoute.
  • Identity and secrets management, including Entra ID, RBAC, Privileged Identity Management, Key Vault, and managed identities.
  • Infrastructure as code and automation using Terraform or Bicep, PowerShell, Azure CLI, and CI/CD pipelines.
  • Migration tooling, including Azure Migrate, Site Recovery, backup and replication tooling, and dependency mapping.
  • Operational tooling, including Azure Monitor, Log Analytics, alerting, and cost visibility.
  • Experience in a regulated environment, and comfortable operating under least privileged, time-bound privileged access with strict data handling requirements. Financial services experience is advantageous.
  • Available to work on site in Singapore and to support agreed out-of-hours cutover windows, disciplined about documenting as you go, and able to clear the firm's background screening and third-party access requirements before engagement start.

Preferred certifications: AZ-104 Azure Administrator Associate. AZ-500 Azure Security Engineer Associate and AZ-700 Azure Network Engineer Associate are advantageous.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Dymon Asia's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Dymon Asia's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Dymon Asia's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.