Cloud Consultant(AWS, Azure)

STAR CAREER CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

STAR CAREER CONSULTING PTE. LTD. is seeking an experienced Lead to manage end-to-end onboarding of AWS accounts into the AWS Landing Zone using Control Tower, provisioning and configuring in line with security and governance standards.

You will collaborate with application, operations and security teams, enforce baseline controls (GuardDuty, Security Hub, IAM, CloudTrail), and drive automation through Terraform, CloudFormation and CI/CD pipelines.

Qualifications

• Experience in enterprise IT operations or cloud service delivery, AWS preferred.
• Strong knowledge of AWS Control Tower, IAM and networking.
• Familiarity with CIS Benchmarks and AWS Well-Architected Framework.
• Proven ability to manage structured workflows and document processes.
• Excellent communication with technical and non-technical audiences.
• IaC hands-on with Terraform/CloudFormation and CI/CD tools.

Responsibilities

• Lead onboarding process by coordinating with application, operations and security teams.
• Oversee account provisioning and baseline controls (GuardDuty, Security Hub, IAM, CloudTrail).
• Ensure security reviews and compliance posture before handover.
• Act as point of contact for onboarding queries and stakeholder updates.
• Identify automation opportunities and embed pipelines with DevOps teams.

Skills

AWS Control Tower

AWS Organizations

IAM

Networking

Security best practices

Communication skills

Process documentation

DevOps collaboration

Terraform

CloudFormation

Jenkins

GitLab CI

GuardDuty

Security Hub

CloudTrail

Tools

Terraform

CloudFormation

Jenkins

GitLab CI

Security Hub

GuardDuty

CloudTrail

Job description

Our client is seeking an experienced Lead to lead the end-to-end onboarding of new AWS accounts and workloads into our AWS Landing Zone environment with AWS Control Tower.

You will ensure that new AWS account is provisioned and configured in accordance to compliance, security, and governance standards and policies.

Scope:

Onboarding Process Management

• Manage the AWS account onboarding process by working closely with application, operations and security teams to understand requirements and timelines.

Account Provisioning & Configuration

• Oversee AWS account creation ensuring all baseline controls (GuardDuty, Security Hub, IAM, CloudTrail) are enforced as part of Infrastructure as Code.
• Ensure that the configurations and restrictions of network connectivity (VPC, Transit Gateway)

Compliance & Security Assurance

• Validate Security Best Practices are met before handover.
• Conduct security reviews for compliance posture and remediation.

Stakeholder Communication

• Act as POC for onboarding-related queries, updating onboarding status updates to stakeholders and management and maintaining onboarding documentation.

Continuous Improvement

• Identify and implement process improvements, automation opportunities, and efficiency gains in onboarding workflows with DevOps teams to embed automation pipelines for account setup.

Requirements:

• Enterprise scale IT operations, cloud service delivery, or project management (AWS experience preferred).
• Strong understanding of AWS Control Tower, AWS Organizations, IAM, networking, and core security services.
• Familiarity with CIS Benchmarks, AWS Well-Architected Framework, and security best practices.
• Proven ability to manage structured workflows and process documentation.
• Excellent communication skills for working with both technical and non-technical audiences.
• Technical exposure in Infrastructure-as-Code (Terraform, CloudFormation); CI/CD pipelines (Jenkins, GitLab CI); Security & compliance (IAM, Security Hub, AWS Config).
• AWS Certified Solutions Architect or other relevant AWS certifications

We respect your privacy and all communication will be treated with confidentiality.