Principal Cloud Engineer: AI-Driven Infra & Security

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Contract role

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) seeks a highly experienced Principal Cloud Services Engineer to lead global cloud architecture, governance, and automation. You will design resilient multi-AZ environments, own Terraform module governance, and develop AI-driven tooling to streamline the entire lifecycle from requirements to code.

Candidate must demonstrate deep cloud proficiency, security-focused policy automation, and mature collaboration with development, operations, and security

Qualifications

• Senior cloud engineering with hands-on Terraform (HCL) expertise.
• Experience implementing Zero-Trust security via Policy-as-Code tools.
• Ability to design machine-parsable JSON/YAML schemas for automated resource management.

Responsibilities

• Lead global multi-AZ cloud architecture design for resilience and performance.
• Govern Terraform modules and IaC naming standards (Golden Library).
• Develop AI-driven automation frameworks to accelerate requirement-to-code lifecycle.
• Architect machine-readable schemas for cloud resources (VPCs, DNS, tagging).
• Integrate CIS Benchmarks into CI/CD pipelines with policy-as-code.
• Enable self-healing infrastructure and automated validation within CI/CD.

Skills

Cloud architecture

Terraform (HCL)

Policy-as-Code

LLMs & AI coding

Networking & IPAM

Zero-Trust security

CI/CD pipelines

JSON/YAML schemas

Multi-cloud / China Private Cloud

English communication

Tools

Policy-as-Code tools

Terraform

CI/CD tooling

AI-assisted development tools

Job description

Hong Kong Exchanges and Clearing Limited (HKEX) seeks a highly experienced Principal Cloud Services Engineer to lead global cloud architecture, governance, and automation. You will design resilient multi-AZ environments, own Terraform module governance, and develop AI-driven tooling to streamline the entire lifecycle from requirements to code.

Candidate must demonstrate deep cloud proficiency, security-focused policy automation, and mature collaboration with development, operations, and security