Turn this role into an interview — a resume and cover letter built around what this employer wants.
BW Maritime Pte. Ltd. is seeking a Manager of Cloud Services to define and govern the Cloud architecture and M365 environment, aligning with industry best practices and the Azure Well-Architected Framework.
You will provide architectural leadership across Azure, M365, networking, identity, and security, delivering secure, resilient, scalable solutions while driving DevOps, IaC, and AI-enabled delivery. This hands-on role covers management, consultancy, architecture, design and implementation,
The Manager of Cloud Services is responsible for helping define and govern the Cloud architecture and M365 Environment for BW, ensuring cloud platforms and Microsoft Services are designed, implemented, and evolved in alignment with industry best practice e.g. Microsoft Azure Well Architected Framework. This role provides architectural leadership across Azure platform, M365, networking, identity, and security, and is accountable for evaluating, designing, and recommending Azure security capabilities to ensure solutions are secure, resilient, scalable, and cost effective across enterprise workloads. This is a "hands on" delivery role covering management, consultancy, architecture, design and implementation capabilities.
Define and maintain the end-to-end Cloud and M365 architecture for BW, covering compute, storage, platform services, microservices, identity and access management, networking and connectivity, hybrid and SaaS integrations, Azure reference architectures, landing zones, and design patterns
Ensure all designs align with the Azure Well Architected Framework, including security, reliability, performance efficiency, cost optimization, operational excellence, and logging, monitoring, reporting and security telemetry
Act as a design authority for Cloud architecture decisions and standards
Work with BW Businesses to design and deploy solutions in Azure
Evaluate Azure application requests for security alignment, technology and security risks and control gaps
Implement or manage outsource implementation of changes
Vendor and technology partner management, including contracts and negotiation
Work with BW business to structure DevOps in a safe and secure manner while delivering agility
Use AI, Automation and IaC for solution delivery
Support security risk assessments and remediation
Manage support partners for delivery of services, service reviews and governance of SLA's
Provide high-priority operational support, problem determination, incident management and escalating to vendors/management accordingly
Manage CNAPP solution, evaluation and remediation of alerts
Work on cyber exposure and vulnerability management in Cloud and M365
6+ years of hands-on experience in Azure and M365 Solution Architecture, design and implementation role
10+ years total experience in infrastructure, cloud, or platform engineering
Proven experience designing enterprise-scale Azure environments
Strong expertise in Azure networking (VNets, peering, routing, private endpoints, WAF, Firewalls)
Strong expertise in Azure identity (Entra, PIM), privilege, access models, roles, conditional access
Strong expertise in Azure compute, storage, and PaaS services
Strong expertise in Hub & Spoke, landing zone architectures
Strong expertise in DevOps
Strong expertise in App Registrations, Enterprise Apps, Graph API permissions
Strong expertise in Multi-Tenant and Cross Tenant capabilities
Exchange/O365 Admin experience
SharePoint/Onedrive experience (Provisioning, permission models, information architecture)
Purview, Defender, Security benchmarks (e.g. CIS), Conditional access experience
Working knowledge of Azure security architecture
Demonstrated experience applying the Azure Well Architected Framework
Depth of knowledge in Hybrid AD/Entra environments
Strong documentation, design, and stakeholder engagement skills
Consultancy experience translating business requirements to architecture decisions and technical solutions
Experience working with Azure security functions including Azure Landing Zones and enterprise subscription design
Identity first and Zero Trust Design Principles experience
Network segmentation and secure connectivity experience
Logging, monitoring, and security telemetry integration experience
Secure by design for hybrid, SaaS, and cloud native workloads experience
Separation of duties, least privilege, defense in depth, ZTNA experience
Architecture of Tenant design and for Multi-tenant Enterprise solutions experience
Cost optimization and resource planning experience
Availability, resiliency and DR/BCP development experience
AI Vision for solutioning and delivery
License management experience
PowerShell / Graph API scripting for automation
Comfortable presenting to an audience the architectural approach, discussing options, maintaining a standard approach and non-negotiables
Knowledge in Firewalls, Microsoft 365 Security, Virtualization security, System security both Linux and Windows, Endpoint Security, IPS/IDS, Cloud Security
CrowdStrike, Zscaler, Next-Gen Firewalls, WAF experience
Experience working with NIST CSF, MITRE ATT&CK Framework, STRIDE Threat Model
Use of GitHub, Azure DevOps or similar
Experience with OCI
Azure Tenant migrations and connectivity experience
Networking and dynamic routing experience
AI - Co-Pilot and other AI integrations, MCP, AI Gateway, Agent365, AI Governance, AI Controls experience
AZ 305 - Azure Solutions Architect Expert certification
AZ 700 - Designing and Implementing Microsoft Azure Networking Solutions certification
SC-100 - Cybersecurity Architect Expert certification
SC-300 - Identity and Access Administrator certification
MS-102 - M365 Administrator certification
Experience working under ITIL
Working knowledge of Trust Zone Segmentation and Zero Trust methodology
Able to work in a systematic and organized manner
Able to work tactfully with team members and peers
Constantly strives to achieve results and customer satisfaction
Reliability, excellent interpersonal manner, patience with end users and ability to work independently
Ability to work under pressure in a fast-paced environment
Excellent communication and stakeholder management skills
Ability to confidently talk openly, raise issues and question decisions
Experienced in managing own workload, scheduling and setting delivery expectations
Strong attention to detail with an analytical mind and outstanding problem-solving skills