Cloud Architect

Thales Group; Otago; On-site; SGD 180,000 - 240,000; Full time

Job summary

Thales Group in Singapore is seeking a senior Cloud Architect to lead design and adaptation of Digital Twin architecture in Azure and Government Cloud, aligning hybrid and multi-cloud workloads.

You will drive Kubernetes platforms, IaC pipelines, governance, security, and regulatory compliance, mentoring teams and guiding PI planning in a Scaled Agile environment.

Qualifications

• 7+ years in cloud architecture with multi-cloud exposure (Azure required).
• Proven Kubernetes architecture and production operations experience.
• Strong networking, identity management, and security controls knowledge.
• Hands-on with IaC tools: Terraform, Helmfile, Crossplane.

Responsibilities

• Lead the design and adaptation of Digital Twin architecture in Azure and Government Cloud.
• Architect systems of systems deployments using Kubernetes platforms to support hybrid workloads.
• Define strategies for hybrid/multi-cloud interoperability and data movement.
• Mentor teams and provide governance, security, and compliance alignment.

Skills

Azure architecture

Kubernetes ops

DevSecOps

Cloud governance

Education

Bachelor in CS/IT

Master in CS/Data Science

Tools

Terraform

Helmfile

ArgoCD

Crossplane

Job description

Responsibilities:

Architecture & Design

• Lead the design and adaptation of Digital Twin architecture in Azure Cloud and Singapore’s Government Commercial Cloud.
• Architect systems of systems deployments (e.g., Air Traffic Management Solutions) using Thales flavored Kubernetes Orchestration Platform to orchestrate containers, virtual machines to support hybrid workloads.
• Define strategies for hybrid and multi-cloud interoperability, data movement, and workload portability (e.g., RMA analysis, data-in-transit, IAM, WAF/secrets management).
• Establish binary portability / compatibility across releases, ensuring the releases are compliant to requirements and regulatory frameworks.
• Establish resilience, redundancy, and disaster recovery across multiple sites and cloud providers.
• Establish KPIs to measure systems resiliency, cloud consumption costs

Compliance & Security

• Ensure cloud deployments adhere to government and industry regulations (e.g., IM8, GDPR, Data Protection Acts, NIST).
• Define data classification, residency, and sovereignty models in line with jurisdictional laws.
• Integrate DevSecOps practices, zero-trust principles, and compliance-as-code into deployment pipelines.
• Implement audit, monitoring, and logging solutions aligned with regulatory requirements (e.g., CIS benchmarks).

Kubernetes & Platform Engineering

• Define standardization Architect and standardize Kubernetes clusters across multi-cloud environments (AKS, RKE2, GCC Kubernetes services).
• Define golden paths for workload deployment, service mesh integration, and API interoperability across the Azure Cloud and GCC.
• Support the adoption of GitOps practices (ArgoCD, Flux) and IaC (Terraform, Helmfile, Crossplane) for cluster and workload management.
• Mentor teams in cloud-native design patterns (12-factor apps, microservices, event-driven architectures).

Collaboration & Governance

• Serve as a bridge between enterprise architecture, DevOps, and security/compliance stakeholders.
• Establish and enforce cloud governance frameworks (policy management, access controls, tagging standards, cost optimization).
• Provide technical leadership during PI Planning, ART syncs, and system demos in a Scaled Agile environment.
• Evaluate new cloud-native services and technologies, balancing innovation with regulatory requirements.

Requirements:

Education

• Bachelors in Computer Science or Information Technology.
• Masters degree in Computer Science or Data Science.

Essential Skills/Experience

• 7+ years of experience in cloud architecture, with multi-cloud exposure (Azure required, GCC preferred) and familiar with Identity Solutions, RBAC, Policies, Regions and AZs, Storage.
• Proven expertise in Kubernetes architecture and operations in production environments.
• Strong knowledge of networking, identity management, and security controls across Azure and GCC.
• Demonstrated experience in designing mission-critical, highly available systems-of-systems; an experience in orchestrating and scaling services at scale is considered equivalent.
• Understanding of cloud compliance frameworks and acts (e.g., GDPR, IM8, NIST 800-53, Cloud Act, Data Protection Acts).
• Hands-on skills with IaC tools (Terraform, Helmfile, Ansible).

Desirable Skills/Experience

If you have the following desirable skills and relevant experiences, it would be an added advantage!

• Certifications: Azure Solutions Architect Expert (AZ-305), CKA/CKAD, CISSP, CCSK.
• Familiarity with service meshes (Istio,Linkerd) and secure API gateways.
• Background in DevSecOps, SRE, or platform engineering practices.

Essential / Desirable Traits

• Possess learning agility, flexibility and pro-activity
• Comfortable with agile teamwork and user engagement