Principal Cloud Services Engineer - Assistant Vice President - Cloud Platform Services - IT - 12 months Contract

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Contract role

Job summary

Hong Kong Exchanges and Clearing Limited (HKEX) seeks a highly experienced Principal Cloud Services Engineer to lead global cloud architecture, governance, and automation. You will design resilient multi-AZ environments, own Terraform module governance, and develop AI-driven tooling to streamline the entire lifecycle from requirements to code.

Candidate must demonstrate deep cloud proficiency, security-focused policy automation, and mature collaboration with development, operations, and security

Qualifications

• Senior cloud engineering with hands-on Terraform (HCL) expertise.
• Experience implementing Zero-Trust security via Policy-as-Code tools.
• Ability to design machine-parsable JSON/YAML schemas for automated resource management.

Responsibilities

• Lead global multi-AZ cloud architecture design for resilience and performance.
• Govern Terraform modules and IaC naming standards (Golden Library).
• Develop AI-driven automation frameworks to accelerate requirement-to-code lifecycle.
• Architect machine-readable schemas for cloud resources (VPCs, DNS, tagging).
• Integrate CIS Benchmarks into CI/CD pipelines with policy-as-code.
• Enable self-healing infrastructure and automated validation within CI/CD.

Skills

Cloud architecture

Terraform (HCL)

Policy-as-Code

LLMs & AI coding

Networking & IPAM

Zero-Trust security

CI/CD pipelines

JSON/YAML schemas

Multi-cloud / China Private Cloud

English communication

Tools

Policy-as-Code tools

Terraform

CI/CD tooling

AI-assisted development tools

Job description

Company Introduction: We’re home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary: We are seeking a highly motivated and experienced Principal Cloud Services Engineer to join Cloud Platform Services team. Our team responsible for designing, deploying, and maintaining cloud-based solution, we also work closely with our development, operations, and security teams to ensure the stability, scalability, and security of our cloud infrastructure.

Job Responsibilities

• Lead the design and evolution of global, Multi-AZ cloud architectures, focusing on resilience, scalability, and performance optimization.
• Infrastructure Governance, own and govern the "Golden Library" of Terraform modules, ensuring all infrastructure-as-code (IaC) follows strict organizational standards and naming conventions.
• AI-Driven Automation & Tooling: Design and build AI-Driven automation frameworks (Infrastructure as Intent) that streamline technical requirement analysis and accelerate the "Requirement-to-Code" lifecycle.
• Architect machine-readable schemas for complex cloud resources, including VPC CIDR allocation, DNS hierarchies, and global tagging taxonomies.
• Integrate CIS Cloud Foundations Benchmarks into the core delivery pipeline using Policy-as-Code tools to ensure 100% compliance at the point of creation.
• Implement automated validation loops that allow for self-healing infrastructure and proactive error correction within CI/CD pipelines.

Job Requirements

• 10+ years of experience in AWS, Azure, GCP or China Brand Private Cloud, with expert-level proficiency in Terraform (HCL) and the ability to build sophisticated, reusable module libraries.
• Deep knowledge of CIS Benchmarks and experience implementing Zero-Trust security models through automated Policy-as-Code (e.g., OPA, Sentinel, or Checkov).
• High proficiency in designing complex JSON/YAML schemas to create machine-parsable environments for automated CIDR allocation, tagging, and resource lifecycle management.
• Experience leveraging Large Language Models (LLMs) and AI coding assistants to accelerate development, with an understanding of how to provide technical context to AI agents for accurate code generation.
• Familiarity with building "closed-loop" automation where systems can interpret requirements, execute plans, and self-correct based on validation feedback.
• Advanced understanding of global networking, including transit routing, software-defined networking, and IP Address Management (IPAM) in a multi-region environment.

Competencies and Behaviors Required

• Analytical Thinking Breaks down complex cloud infrastructure challenges into manageable components. Identifies root causes of system issues and proposes practical, data-driven solutions. Applies structured thinking to evaluate cloud architecture and deployment strategies.
• Risk Awareness Understands and adheres to HKEX’s risk appetite when implementing cloud solutions. Recognizes potential vulnerabilities in cloud environments and proactively mitigates them. Makes informed decisions that balance innovation with operational stability.
• Intellectual Curiosity Actively explores emerging cloud technologies (e.g. AWS, Alibaba Cloud and China Brand Private Cloud). Seeks to understand the rationale behind new tools and practices such as Kubernetes, Terraform and CI/CD pipelines. Demonstrates a growth mindset by continuously learning and applying new knowledge.
• Resilience Maintains composure and adaptability when troubleshooting critical cloud system issues. Manages multiple tasks and shifting priorities with focus and determination. Responds constructively to setbacks and uses them as learning opportunities.
• Effective Communication Explains complex technical concepts clearly to non-technical stakeholders. Communicates status updates, blockers and risks in a timely and transparent manner. Collaborates effectively with cross-functional teams including development, operations and security.
• Teamwork Works collaboratively with colleagues to deliver secure and scalable cloud solutions.

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract

Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world’s leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange. As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through its pioneering Connect schemes, increasingly diversified product ecosystem and its deep, liquid and international markets. HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all. Discover the latest career opportunities and programmes at HKEX. Unauthorised access or use is prohibited. HKEX reserves the right to take appropriate action against any offenders.