Role Summary
We are seeking an experienced AWS Cloud Architect to join us. This is a dual-mandate role: you will ensure the reliability, security, and continuous evolution of our production IoT SaaS platform, while concurrently leading cloud architecture for our next-generation Intelligent Building Management System (iBMS). You will work hands‑on with AWS‑managed services and IoT protocol stacks, collaborating closely with firmware, backend, and product teams.
Key Responsibilities
- Own end-to-end AWS infrastructure for our SaaS products, ensuring high availability, low latency, and security.
- Manage AWS services for identity, databases, storage, and messaging in a multi‑tenant environment.
- Maintain Kubernetes cluster health: scaling, RBAC, pod autoscaling, and upgrade cadence.
- Enforce security best practices: IAM least‑privilege, network segmentation, device‑to‑cloud authentication, and compliance with SOC 2 / ISO 27001.
- Collaborate with firmware and backend teams on IoT device onboarding, OTA updates, and protocol integration.
- Lead cloud architecture for our next‑generation Intelligent Building Management System (iBMS), spanning IoT, data, and AI layers.
- Own infrastructure cost governance, disaster recovery plans, and RTO/RPO commitments.
Required Qualifications & Experience
- AWS Certified Solutions Architect – Professional (mandatory); AWS Certified DevOps Engineer – Professional (advantageous).
- Proven experience designing event‑driven, microservices architectures for multi‑tenant SaaS products.
- Expert Python programming; intermediate Go; JavaScript/TypeScript/C/C++ advantageous.
- Deep proficiency with core AWS services: EKS, ECS, ECR, IAM, Cognito, API Gateway, S3, SNS, Route53, CloudFront, CloudWatch, and KMS.
- Hands‑on Kubernetes administration (RBAC, HPA/VPA/KEDA, network policies) and Istio service mesh (mTLS, traffic management, observability).
- Infrastructure as Code using Terraform (preferred) or AWS CDK; CI/CD pipeline experience with GitHub Actions, GitLab CI, or Jenkins.
- Observability stack experience: Prometheus, Thanos, and Grafana.
- Familiarity with IoT protocols (MQTT, Modbus, LoRaWAN, Zigbee, BACnet/IP) and device provisioning patterns (X.509, OTA updates).
- Prior experience in an architect or principal engineer role, ideally in an IoT or SaaS environment.
Preferred Qualifications
- Experience developing cloud solutions compliant with ISO 27001, SOC 2, or Singapore CyberSG requirements.
- Background in smart building platforms, IBMS, SCADA, or building automation systems (BAS).
- Experience with Digital Twin platforms and related data models.
- Experience with payment gateway integrations and PCI‑DSS compliance.
- Exposure to AI/ML workloads on AWS (SageMaker, Bedrock) for analytics or forecasting applications.
- Knowledge of Singapore BCA Green Mark requirements and smart building energy standards.
Core Competencies
Technical Leadership:
- Systems thinking — holistic design across stack layers
- Trade‑off analysis (build vs. buy, consistency vs. availability)
- Security‑first mindset in all design decisions
- Data‑driven performance optimisation
- Ownership mentality for production reliability
Interpersonal & Delivery:
- Ability to communicate architecture to non‑technical stakeholders
- Strong written documentation habits (ADRs, runbooks, RFCs)
- Collaborative approach with firmware, product, and QA teams
- Calm under production incident pressure; structured incident command
- Self‑directed; able to prioritise across parallel workstreams
What We Offer
- Dual mandate role with significant technical scope: live SaaS operations plus greenfield iBMS platform development.
- Opportunity to architect and build a next‑generation Intelligent Building Management System from inception.
- Exposure to the full IoT stack: from field device protocols to cloud data platforms and AI‑driven building analytics.
- Collaborative engineering culture with short decision cycles and direct access to product leadership.