Senior Cloud Platform Engineer

Job Description

We are seeking an experienced Senior Cloud Platform Engineer to design, build, operate and continuously improve enterprise-grade cloud platform capabilities on Microsoft Azure.

The successful candidate will play a key role in developing secure, scalable and reusable cloud infrastructure and platform services that enable application and product teams to deploy and operate cloud-native solutions efficiently. This role requires strong hands-on expertise across Azure infrastructure, DevSecOps, infrastructure-as-code, identity and access management, CI/CD automation and cloud governance.

The role will involve working within enterprise and regulated cloud environments, including Government Commercial Cloud (GCC), while collaborating closely with engineering, security, architecture and product teams.

Key Responsibilities

• Design, build, manage and operate secure and scalable cloud infrastructure and platform services on Microsoft Azure.

• Develop and maintain Azure platform capabilities including Azure Landing Zones, Azure Policy, Azure Container Apps, Azure App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Azure Cost Management.

• Support cloud engineering and platform operations within Government Commercial Cloud (GCC) environments while adhering to applicable governance, security, compliance, identity and network controls.

• Develop reusable infrastructure and automated provisioning solutions using Azure Bicep, Terraform or equivalent infrastructure-as-code technologies.

• Design, implement and maintain CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.

• Automate build, testing, security scanning, deployment, release promotion, rollback and quality-gate processes.

• Implement DevSecOps practices and platform guardrails, including secrets management, vulnerability scanning, policy-as-code, automated security checks and compliance controls.

• Design and maintain identity and access controls using Microsoft Entra ID, RBAC, Conditional Access, Privileged Identity Management (PIM), access reviews and least-privilege principles.

• Support enterprise identity integration involving Active Directory, directory services, authentication flows, group-based access and hybrid identity environments.

• Implement and support modern authentication and authorization standards including SAML, OpenID Connect, OAuth 2.0 and JWT.

• Support the integration, security and operation of AI/ML services on Azure, including access controls, network security, monitoring, service configuration and production-readiness requirements.

• Apply AI-assisted development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent solutions to improve engineering productivity, testing, documentation and code quality.

• Support cloud-native applications and shared platform capabilities with responsibility for deployment, monitoring, reliability and operational support.

• Develop reusable engineering patterns, templates, platform services and developer self-service capabilities for application and product teams.

• Monitor platform reliability, security, performance and cloud costs and recommend continuous improvements.

• Produce and maintain clear technical documentation covering platform architecture, configurations, operational procedures and engineering standards.

• Collaborate with technical and non-technical stakeholders in an agile, product-oriented environment.

Requirements

• Bachelor's Degree or Diploma in Computer Science, Information Technology, Engineering or a related discipline.

• Minimum 10 years of relevant hands-on engineering experience, with significant experience in cloud infrastructure, platform engineering, DevOps or related areas.

• Strong hands-on experience designing, building and operating Microsoft Azure infrastructure in enterprise or regulated environments.

• Strong knowledge of Azure platform services, cloud governance, monitoring, security and cost management.

• Practical experience working with Government Commercial Cloud (GCC) environments is highly preferred.

• Extensive hands-on experience with Terraform, Azure Bicep or equivalent infrastructure-as-code tools.

• Strong experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.

• Strong understanding and practical application of DevSecOps principles and secure software delivery practices.

• Hands-on experience with Microsoft Entra ID, RBAC, Conditional Access, PIM and enterprise access governance.

• Working knowledge of Active Directory and enterprise/hybrid identity integration.

• Good understanding of OAuth 2.0, OpenID Connect, SAML, JWT and modern authentication and authorization patterns.

• Knowledge of containerisation, APIs, cloud-native application architecture and production-readiness practices.

• Experience supporting at least one production cloud-native application or shared cloud platform.

• Exposure to securing and operating AI/ML services within Azure environments would be advantageous.

• Familiarity with AI-assisted software development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent tools.

• Strong analytical, troubleshooting, documentation and communication skills.

• Ability to work effectively across engineering, architecture, security, product and business teams.

• Comfortable working in an agile environment and continuously improving platform capabilities based on user and product-team feedback.

Preferred Skills

• Microsoft Azure certifications or relevant cloud/platform engineering certifications.

• Experience within Singapore Government or other highly regulated technology environments.

• Experience building internal developer platforms, reusable cloud engineering templates or developer self-service capabilities.

• Knowledge of cloud security, FinOps, observability and platform reliability practices.