Cloud and Network Infrastructure  

Key Responsibilities

1. Site Network Infrastructure

• Own client’s network design and VLAN architecture across all retail store and HQ sites — reviewing the current topology, identifying gaps, and recommending changes to strengthen segmentation and resilience.
• Maintain network documentation including topology diagrams, VLAN registers, IP address management, and configuration standards.
• Coordinate with Singapore IT Infrastructure & Support for physical network implementation; provide configuration specifications and validate completed work against design.
• Work with the Cybersecurity & Compliance Analyst to ensure network segmentation and security policies are aligned, and implement infrastructure-layer changes arising from security reviews.
• Support new store infrastructure delivery: scope network requirements, prepare site configuration specifications, and coordinate rollout with the IT Project & Delivery Manager and Singapore IT Infrastructure & Support.

2. Cloud Identity & Microsoft 365

• Administer client’s Azure Active Directory (Entra ID) tenant — user and group lifecycle, Conditional Access policies, role-based access control, and identity governance.
• Manage Microsoft 365 services: Exchange Online, SharePoint, Teams, Intune device management, and licence administration across all entities.
• Maintain Azure infrastructure supporting Microsoft workloads: Virtual Networks, NSGs, VPN gateways, Key Vault, App Service, and Azure SQL — ensuring configurations are secure and documented.
• Build and maintain CI/CD pipelines in Azure DevOps for client’s application workloads including Power Platform solution releases and D365 hotfix deployments.

3. BCM & Disaster Recovery

• Own client’s BCM programme end-to-end — maintain the BCM policy, business impact assessments, recovery time objectives, and the IT Disaster Recovery plan.
• Plan, schedule, and execute DR tests at least annually; document test outcomes, gaps identified, and remediation actions.
• Manage backup infrastructure across on-premise and cloud environments; validate backup jobs, monitor restore readiness, and coordinate with the Data team on cloud data backup alignment.
• Coordinate with Singapore IT Infrastructure & Support on physical infrastructure elements of the DR plan, including hardware failover and site recovery procedures.

4. Multi-Cloud Infrastructure

• Support the Data team on AWS infrastructure setup where cloud networking, VPC configuration, or IAM design requires infrastructure input.
• Provide infrastructure-layer awareness as the client's multi-cloud footprint (AWS for data and AI, Azure for enterprise workloads) evolves — ensuring consistent security controls and network design principles across platforms.

Required Qualifications & Experience

• Minimum 5 years in IT infrastructure or network engineering roles, with demonstrated hands-on experience in multi-site network design and VLAN configuration.
• Proven experience with enterprise networking equipment and concepts: switching, routing, VLAN segmentation, VPN, LAN/WAN architecture, and firewall policy coordination.
• Hands-on experience administering Azure Active Directory (Entra ID) and Microsoft 365 services including Exchange Online, Teams, SharePoint, and Intune.
• Experience owning or significantly contributing to a BCM or DR programme — including plan documentation, testing, and post-test improvement.
• Demonstrated experience with enterprise backup solutions and restore validation processes.
• Strong written and spoken English — required for regular coordination with the Singapore team and documentation standards.
• Bachelor's degree in Computer Science, Information Technology, or a related field; or equivalent professional experience

Technical Proficiency

• Networking: VLAN design and segmentation, LAN/WAN, routing and switching (Cisco preferred), VPN technologies, firewall policy coordination, network documentation and topology diagramming.
• Cloud Identity: Azure Active Directory / Entra ID, Conditional Access, RBAC, Microsoft 365 administration (Exchange Online, SharePoint, Teams, Intune).
• Azure Infrastructure: Virtual Networks, NSGs, VPN gateways, Key Vault, App Service, Azure SQL — configuration and management.
• BCM & DR: BCM policy frameworks, business impact assessment, RTO/RPO definition, DR plan development, DR testing, backup solution management (Veeam or equivalent).
• DevOps: Azure DevOps CI/CD pipelines; Git-based workflows; infrastructure-as-code familiarity (Terraform or Bicep).
• Operating Systems: Windows Server administration; Linux fundamentals for server and network tasks