Cloud Solution Architect

Silverlake Axis; Selangor; On-site; MYR 240,000 - 360,000; Full time

Job summary

Jora Malaysia is recruiting a Cloud & Infra Solution Architect to set the technical direction and build a secure, scalable cloud-native platform. You will lead DevOps, CI/CD, and security-by-design across the product lifecycle, ensuring alignment with regulatory requirements while enabling rapid deployment of banking solutions.

You will collaborate with developers to optimize Java-based applications for containerized environments and ensure robust platform resilience and observability.

Qualifications

• Extensive architectural thinking with a builder mindset.
• Strong knowledge of Java/J2EE and secure coding in distributed, highly available systems.
• Proven DevOps experience with CI/CD automation and security tooling.
• Deep cloud security knowledge including IAM, encryption, and zero-trust principles.
• Experience with cloud platforms (Huawei, AWS, Azure) and on-prem constraints.
• Familiarity with banking security standards and regulatory alignment.

Responsibilities

• Architect future direction of the product platform focusing on security, scalability and resilience.
• Design secure end‑to‑end CI/CD pipelines and DevOps standards for product teams.
• Embed security controls across the platform lifecycle and support PoC validation.
• Collaborate with developers to optimize Java apps for containerized environments.
• Design secure integration between cloud-native stacks and on-prem systems.

Skills

Cloud architecture

DevOps

Security-by-design

Kubernetes

Java/J2EE

CI/CD pipelines

IAM & encryption

Zero trust

Regulatory compliance

Cloud platforms (Huawei, AWS, Azure)

Container security

Observability tools

Tools

Jenkins

GitHub

Jira

Grafana

Prometheus

ELK stack

Docker

Kubernetes

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

***Only local applicants who do not require visa or work permit sponsorship will be considered.***

Why This Role Matters

As the Cloud & Infra Solution Architect, you are the technical authority and the “Brain” of our technology direction. You don’t just design infrastructure; you designa secure, resilient, and scalable ecosystem where code meets cloud. You are responsible for ensuring our product platform is built on a high-performance, cloud-native foundation with security embedded by design. By mastering the intersection of DevOps, CI/CD automation, infrastructure security and application architecture, you ensure our product factories can deploy secure, scalable banking solutions at high velocitywhile maintaining strong cyber resilience and regulatory alignment.

How You’ll Make a Difference

• Architectural Engineering: Research, evaluate, and test cloud-native technologies to design the future direction of the product platform with security, scalability, and resilience built into the architecture.
• DevOps & CI/CD Design: Architect secure end-to-end automation pipeline (CI/CD) and DevOps standards and deployment standards that all product teams must follow.
• Security-by-Design: Embed cybersecurity controls including IAM, secrets management, encryption, vulnerability management, container security, and policy enforcement across the platform lifecycle.
• App-to-Infra Alignment: Collaborate with developers to ensure Java-based applications are optimized and secured for containerized environments (Kubernetes/Docker).
• Hybrid Modernization: Design secure integration between modern cloud-native stacks and legacy on-prem core banking systems while ensuring network segmentation, data protection, and regulatory compliance.
• Platform Resilience & Compliance: Ensure platform architecture supports high availability, disaster recovery, observability, auditability, and compliance with banking and security standards.
• Practical Validation: Conduct deep-dive testing, security reviews and "proof of concept" (PoC) work to ensure all architectural ideas are realistic, secure, and suitable for long-term growth.

What You’ll Bring

• Deep Technical Leadership: Extensive experience in architectural thinking coupled with a "builder" mindset. You can code the PoC for the architecture you design.
• Application & Security Savvy: Strong understanding of Java/J2EE application frameworks, secure coding principles and application behaviour in distributed, high-availability environments.
• DevOps Expertise: Proven track record in designing automated deployment workflows, integrating security scanning into CI/CD pipelines and container orchestration strategy.
• Cloud Security Knowledge: Strong knowledge of cloud security architecture, zero-trust principles, identity and access management (IAM), encryption, and workload protection
• Hybrid Knowledge: Mastery of both public cloud (Huawei, AWS, Azure) and on-prem hardware constraints (Storage, Network, Virtualization).
• Risk & Governance Awareness: Experience aligning architecture decisions with enterprise security policies, regulatory requirements, and operational risk management.
• Open & willing to travel locally and overseas as required to support business needs.
• Programming & Frameworks: Solid understanding of Java, secure application server configurations, API security, application server configurations, and microservices architecture.
• DevOps Ecosystem: Expert knowledge in designing and implementing CI/CD pipelines with integrated security tooling (SAST, DAST, SCA, container scanning), Jenkins, GitHub, and Jira integration.
• Container & Platform Security: Hands-on mastery of Kubernetes (K8s), Docker, container networking, runtime security, image hardening, and Kubernetes security best practices.
• Identity & Access Management: Knowledge of RBAC, PAM, MFA, secrets management, certificate management, and privileged access controls.
• Orchestration: Hands-on mastery of Kubernetes (K8s), Docker, and container networking/security.
• Cloud Platforms: Architectural proficiency across Huawei Cloud, AWS, and Azure.
• Observability: Knowledge of designing monitoring and logging frameworks (e.g., Grafana, Prometheus, ELK) to support platform reliability.
• Infrastructure Security: Strong understanding of network security, firewalls, segmentation, WAF, endpoint protection, vulnerability management, and disaster recovery architecture.
• Compliance & Standards: Familiarity with banking and security standards such as PCI DSS, ISO 27001, CIS Benchmarks, and regulatory security requirements.

***Only local applicants who do not require visa or work permit sponsorship will be considered.***