Cloud Engineer - Automation (CPE)

Synapxe; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

A leading healthcare tech company in Singapore is seeking a highly skilled Cloud Lead Engineer to design and implement scalable cloud solutions. The ideal candidate will have extensive experience with AWS services and a strong focus on security and governance. This role involves enhancing existing services and integrating AI/ML capabilities to innovate healthcare solutions.

Qualifications

• 6+ years of hands-on experience with AWS Native Services.
• Strong focus on multi-tenant account governance and network security.
• AWS Certified preferred.

Responsibilities

• Design and manage AWS cloud infrastructure.
• Build and enhance cloud services.
• Implement account governance and security measures.

Skills

AWS native services

Network security

Identity and access management

Cloud service delivery

Scripting languages (Python, Bash, PowerShell)

Education

Bachelor's degree in computer science or related field

Tools

AWS CloudFormation

AWS CDK

Terraform

AWS Security Hub

CloudWatch

Job description

Position Overview

We are seeking for a highly skilled and motivated Cloud Lead Engineer to join Healthcare Commercial Cloud (HCC) to design, implement, and continuously improve HCC solutions and services in a multi-tenant cloud environment. This role requires deep hands-on expertise in AWS native services, with a strong focus on multi-tenant account governance, oversight function, network security, identity and access management, and cost optimized cloud service delivery. As a cloud lead engineer, you are expected to design and implement cloud solutions that align with business needs, regulatory requirements, and long-term scalability. You will also be responsible for enhancing existing services, introducing new cloud capabilities, ensuring robust security, visibility, and operational control within a multi-account AWS environment managed via Control Tower, AWS Organizations, Service Control Policies, Resource-Based Policies, and Security Hub. You are also expected to integrate AI/ML capabilities using AWS services to enhance analytics, automation and business intelligence use cases.

Role & Responsibilities

• Design, implement, and manage secure, scalable, and cost-efficient AWS cloud infrastructure using AWS native services.
• Build new cloud services and enhance existing platforms based on evolving business and operational requirements.
• Implement and enforce account governance using AWS control tower, SCPs, RCPs, AWS organizations, AWS config, firewall manager, and security hub.
• Architect secure, scalable, and resilient network topologies using VPC, subnets, NAT, VPN, Transit Gateway, Direct Connect, and PrivateLink.
• Manage hybrid connectivity between on-premises and cloud environments with a focus on performance, availability, and security.
• Familiar with AWS network firewall, VPC traffic mirroring, and other advanced networking services in AWS.
• Familiar with identity and access controls using IAM, SCPs, AWS SSO, and IAM Identity Center.
• Monitor, investigate, and remediate security findings from AWS Security Hub, GuardDuty, Inspector, Config, Firewall Manager, Shield Advanced, and IAM Access Analyzer.
• Secure workloads by enforcing least privilege access and enabling encryption with AWS KMS and Secrets Manager.
• Provide technical advisory on cloud application design, network, and security architecture or other cloud related technologies
• Establish centralized logging, detection, monitoring, and incident response capabilities across accounts and regions.
• Utilize observability tools such as CloudWatch, OpenSearch, QuickSight, Grafana, or similar solutions to monitor cloud resources effectively.
• Develop operational dashboards and reporting mechanisms to support infrastructure monitoring, performance analysis, and compliance requirements.
• Able to automate provisioning and configuration management using AWS CloudFormation, AWS CDK, or Terraform.
• Able to monitor and troubleshoot cloud environments using CloudWatch, X-Ray, CloudTrail, and AWS Config.
• Maintain comprehensive documentation covering infrastructure architecture, account structure, and governance policies.

Requirements

• Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent experience).
• 6+ years of hands-on experience with AWS Native Services with a strong focus on multi-tenant account governance, oversight function, network security, identity and access management, and cost optimized cloud service delivery.
• AWS Certified is preferred
• Solid understanding of AWS Organizations, Landing Zone architecture, and cloud governance best practices.
• Proficiency in scripting languages such as Python, Bash, or PowerShell is desirable.
• Expertise in AWS networking including VPCs, subnets, security groups, route tables, direct connect, and NAT Gateways.
• Strong working knowledge of cloud security tools such as IAM, Security Hub, GuardDuty, Inspector, Shield Advanced, KMS, and secrets manager.
• Familiarity with centralized monitoring and logging solutions such as CloudWatch, OpenSearch, CloudTrail, Config, QuickSight, and Systems Manager.
• Experience with integrating or operating AI/ML services in AWS such as Bedrock, SageMaker, comprehend, Rekognition.
• Experience in developing operational dashboards and enable observability for cloud resources.
• Familiarity with security and compliance frameworks such as CIS AWS Foundation Benchmark or AWS Foundational Best Practices.
• Experience in designing public-private network segmentation to support layered architectures, including presentation, business logic, micro-services, and data layers, serving both Internet and Intranet environments.
• Proven track record in leading cloud projects from design to implementation, balancing cost, security, and business requirements.

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!