Cloud Engineering

ITCAN Pte Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ITCAN Pte Limited is seeking a Cloud Engineer to design, deploy and manage AWS cloud infrastructure including EC2, S3, VPC, RDS, and Lambda. You will implement ECS/EKS, CloudFront, Route 53, DynamoDB and enforce best practices for security and DR.

Responsibilities include IaC with CloudFormation/ Terraform/ AWS CDK; CI/CD pipelines with Jenkins/GitHub Actions; automation with AWS CLI and Python; and 24/7 standby production support to ensure high availability.

Qualifications

• Design, deploy, and manage AWS cloud infrastructure including EC2, S3, VPC, RDS, and Lambda.
• Implement and maintain AWS services such as ECS, EKS, CloudFront, Route 53, and DynamoDB.
• Monitor cloud resources and optimize for performance, cost-efficiency, and scalability.
• Implement disaster recovery and high availability solutions using AWS best practices.
• Manage multi-account AWS environments using AWS Organizations and Control Tower.

Responsibilities

• Develop Infrastructure as Code using CloudFormation, Terraform, or AWS CDK.
• Implement CI/CD pipelines using CodePipeline, CodeBuild, CodeDeploy, Jenkins, or GitHub Actions.
• Automate deployment, configuration, and management tasks using AWS CLI, Python (Boto3), or Bash scripting.
• Support continuous integration and delivery practices across development teams.
• Implement automated testing and validation of infrastructure changes.

Skills

AWS Cloud

CloudFormation

Terraform

AWS CDK

CI/CD

Jenkins

GitHub Actions

Python

Bash

Docker

Kubernetes

IAM

VPC & Networking

Monitoring

Tools

AWS CloudFormation

Terraform

AWS CDK

Jenkins

GitHub Actions

GitLab CI

AWS CLI

Docker

Kubernetes

ECS/EKS

CloudWatch

Job description

Cloud Engineer (AWS Cloud Infrastructure, IaC, AWS DevOps & AWS Security + 24/7 Standby Support Required)

Cloud Infrastructure Management

• Design, deploy, and manage AWS cloud infrastructure including EC2, S3, VPC, RDS, and Lambda
• Implement and maintain AWS services such as ECS, EKS, CloudFront, Route 53, and DynamoDB
• Monitor cloud resources and optimize for performance, cost‑efficiency, and scalability
• Implement disaster recovery and high availability solutions using AWS best practices
• Manage multi‑account AWS environments using AWS Organizations and Control Tower

Automation & DevOps

• Develop Infrastructure as Code using AWS CloudFormation, Terraform, or AWS CDK
• Implement CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, Jenkins, or GitHub Actions
• Automate deployment, configuration, and management tasks using AWS CLI, Python (Boto3), or Bash scripting
• Support continuous integration and continuous delivery practices across development teams
• Implement automated testing and validation of infrastructure changes

Security & Compliance

• Implement AWS security best practices including IAM policies, roles, and permissions
• Configure security groups, NACLs, WAF, and Shield for network protection
• Ensure compliance with industry standards and regulatory requirements (SOC 2, ISO 27001, GDPR)
• Monitor security threats using AWS GuardDuty, Security Hub, and CloudTrail
• Manage encryption, KMS, Secrets Manager, and certificate management
• Conduct regular security audits and vulnerability assessments

Collaboration & Support

• Partner with development teams to architect cloud‑native and serverless applications
• Provide technical guidance and mentorship to team members
• Troubleshoot and resolve cloud infrastructure and application issues
• Document architecture diagrams, runbooks, and standard operating procedures
• Participate in on‑call rotation for production support and incident response
• Collaborate with partners and alliances to deliver integrated solutions

Qualifications

Technical Skills

• AWS services: Deep knowledge of core AWS services (EC2, S3, VPC, RDS, Lambda, ECS/EKS, CloudWatch)
• Automation & Scripting: Proficiency in Python, Bash, PowerShell, or similar languages
• Infrastructure as Code: Hands‑on experience with CloudFormation, Terraform, or AWS CDK
• CI/CD tools: Experience with AWS CodePipeline, Jenkins, GitLab CI, or GitHub Actions
• Containerization: Knowledge of Docker, Kubernetes, Amazon ECS, and Amazon EKS
• Networking: Understanding of VPC, subnets, routing, VPN, Direct Connect, and load balancing
• Security: Experience with IAM, Security Groups, KMS, Secrets Manager, and AWS security services
• Monitoring & Logging: Proficiency with CloudWatch, CloudTrail, X‑Ray, and third‑party monitoring tools
• Databases: Familiarity with RDS, DynamoDB, Aurora, and database migration strategies