As the Cloud Platform Engineer for K3 Advisory Group’s Malaysia office, you will be the glue between our development and infrastructure teams, enabling fast, safe, and repeatable delivery across multiple projects.

You will partner with developers to build CI/CD pipelines and configure cloud services, validate infrastructure setups, identify and close gaps in deployments, and make sure our applications are well architected, stable, observable, and secure in production. Our primary hyperscale cloud provider is Microsoft Azure, though we do also have some smaller workloads running in Amazon AWS and Google GCP.

Working closely with the Head of Software Development, our cloud solutions engineering team, and colleagues in the security operations function, you will champion DevOps practices and balance developer velocity with operational rigour and long-term platform reliability.

Core Responsibilities

• CI/CD Pipelines: Design, build, and maintain robust, repeatable release pipelines across dev, UAT, and production using Azure DevOps (YAML).

• DevOps Enablement: Partner with development teams to embed DevOps practices, automate manual steps, and reduce friction on the path to production.

• PaaS Configuration: Configure and tune cloud platform services to meet performance, cost, and security requirements — for example App Services, Function Apps, Container Apps, API Management (including policy authoring), Key Vault, Service Bus, and Storage.

• Infrastructure as Code: Author and review IaC templates (Terraform or Bicep), ensuring environments are reproducible, version-controlled, and consistent across regions, tiers, and clouds.

• Infrastructure Testing: Validate infrastructure setups end-to-end, identifying gaps, misconfigurations, or single points of failure before they reach production.

• Deployment Quality: Review deployment artefacts and release configurations across environments, surfacing issues early and feeding fixes back into the pipeline.

• Monitoring & Observability: Implement and maintain monitoring, logging, and alerting using tools such as Azure Monitor, Application Insights, and Log Analytics — including tuning Function App and Container App workloads based on real-world telemetry.

• Application Stability: Investigate production incidents, perform root-cause analysis, and drive actions that improve reliability and reduce repeat failures.

• Security & Identity: Embed “secure by default” practices across pipelines, environments, and runtimes — including Entra ID app registrations and managed identities, secrets management, access control, patching, and vulnerability scanning.

• Cross-Team Collaboration: Act as a trusted partner to Development, QA, Architecture, and Infrastructure, translating between application and platform concerns.

• Standards & Documentation: Define and maintain platform engineering standards, runbooks, and reference patterns the wider team can rely on.

• Continuous Improvement: Identify and drive improvements across tooling, automation, pipelines, and ways of working.

• Mentoring: Coach developers on DevOps practices, pipeline design, and operational ownership of their services, raising the platform engineering capability of the wider team.

• Project Delivery: Balance short-term delivery needs with long-term platform sustainability and operational excellence.

Essential Skills & Tech Stack

• Strong hands-on experience with Microsoft Azure, including PaaS services such as App Services, Function Apps, Container Apps, API Management, Key Vault, and Entra ID, with the ability to configure, tune, and secure them in production.

• Proven experience building and maintaining Azure DevOps CI/CD pipelines (YAML) across multiple environments.

• Working knowledge of AWS services and architectural patterns, with the willingness and aptitude to grow into hands-on AWS delivery as our footprint expands.

• Hands-on experience with Infrastructure as Code (Terraform preferred; Bicep or ARM also valued) and Git-based workflows.

• Experience implementing monitoring, logging, and alerting using Azure Monitor, Application Insights, and Log Analytics, with the ability to define meaningful SLOs and alerts.

• Working knowledge of containerisation (Docker) and Azure container hosting (Container Apps and/or AKS).

• Familiarity with at least one backend ecosystem (.NET, Python, or PHP) — enough to read code, debug deployments, and pair with developers on platform issues.

• Strong understanding of secure-by-design principles, including identity (Entra ID app registrations, managed identities), secrets management, networking, and vulnerability management.

• Hands-on Agile delivery experience (Scrum/Kanban).

• Strong stakeholder communication skills, able to explain platform decisions and trade-offs to both technical and non-technical audiences.