Cloud Platform Engineer

SEDHA CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

SEDHA CONSULTING PTE. LTD. seeks a hands-on Senior Cloud Platform Engineer to build and scale a self-service Azure platform. You will enable product teams to move AI experiments from sandbox to production quickly, safely, and with clear accountability.

You will design IaC templates, implement CI/CD pipelines, and embed security controls while supporting AI-assisted development and platform observability.

Qualifications

• 10+ years of hands-on engineering experience designing and operating cloud infrastructure on Microsoft Azure in enterprise or regulated environments.
• Deep hands-on experience with Azure platform services such as Azure Landing Zones, Azure Policy, Azure Container Apps, Azure App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Azure Cost Management.
• Hands-on experience operating in Government Commercial Cloud (GCC) environments with governance, security, compliance, identity and access controls.
• Extensive experience with infrastructure-as-code using Azure Bicep, Terraform or equivalent tools.
• Extensive experience designing and operating CI/CD and GitOps pipelines with AzureDevOps, GitHub, ShipHATS or similar platforms, including automated build, tests, security checks and release gates.
• Strong DevSecOps practice experience including platform guardrails, automated checks, secrets management, vulnerability scanning and policy-as-code.
• Identity and access engineering using Microsoft Entra ID, RBAC, Conditional Access, PIM and least-privilege governance.
• Practical AI literacy using AI-assisted development tools to improve software delivery and productivity.
• Experience integrating and operating AI/ML platform services on Azure with security and production-readiness controls.
• Knowledge of Active Directory and hybrid identity concepts, including authentication flows.
• Familiarity with modern authentication standards like SAML, OIDC, OAuth 2.0, JWT and enterprise patterns.
• Knowledge of containerization, APIs, cloud-native patterns and production-readiness practices.
• Ability to translate platform architecture into reusable engineering patterns and self-service capabilities.
• Strong documentation and communication skills for both technical and non-technical stakeholders.
• Comfortable in an agile, product-oriented environment delivering incremental platform capabilities.

Responsibilities

• Design, build and operate Azure-based platform capabilities supporting sandbox to production environments.
• Develop and maintain infrastructure-as-code templates using Azure Bicep, Terraform or equivalents.
• Create self-service golden paths for provisioning, templates and deployment patterns.
• Implement CI/CD pipelines using Azure DevOps, GitHub, ShipHATS to automate builds, tests, releases and rollbacks.
• Embed security and compliance controls into platform workflows via policy-as-code and automated checks.
• Hardening of AI-enabled apps into evaluable MVPs with secure architectures and deployment baselines.
• Manage identity and access controls using Entra ID, RBAC, PIM and least-privilege practices.
• Develop observability with Azure Monitor and dashboards for cost, health and delivery metrics.
• Support FinOps with tagging, budget alerts and show-back reporting to product owners.
• Collaborate with product owners, developers, security, audit, finance and leadership.
• Document reusable patterns and operating procedures to improve adoption and knowledge retention.

Skills

Cloud architecture

DevSecOps

CI/CD automation

Identity and access management

AI literacy

Security by design

GitOps

Azure platform knowledge

Communication

Platform governance

Tools

Azure Bicep

Terraform

ShipHATS

Azure DevOps

GitHub

Copilot

Azure Monitor

Defender for Cloud

Job description

Senior Cloud PlatformEngineer

We arelooking for a hands-on Platform Engineer with practical AI literacy to helpbuild and scale Platform on Microsoft Azure. The platform isdesigned as a self-service, governed and automation-led foundation that enablesproduct teams to move AI experiments and digital products from sandbox toproduction faster, safer and with clearer accountability.

This role'sits within the Platform & Software Engineering Division and will supportthe development of reusable platform capabilities across infrastructureprovisioning, CI/CD delivery, AI-assisted development, AI applicationhardening, identity and access, observability, FinOps, compliance automationand developer self-service. The successful candidate will help turn cloudcomplexity into secure, repeatable golden paths that product teams can consumewith minimal friction.

Key Responsibilities

• 1.Design,build and operate Azure-based platform capabilities that support the DigitalFactory across sandbox, QA, UAT and production environments.
• 2.Developand maintain infrastructure-as-code templates using tools such as Azure Bicep,Terraform or equivalent, enabling consistent and repeatable environmentprovisioning.
• 3.Buildself-service golden paths for product teams, including environmentprovisioning, application templates, deployment patterns, access requests andapproved tooling.
• 4.ImplementCI/CD pipelines using Azure DevOps, GitHub, ShipHATS or equivalent platforms toautomate build, test, release, promotion and rollback processes.
• 5.Embedsecurity, reliability and compliance controls into platform workflows throughpolicy-as-code, automated checks and guardrails.
• 6.Supportthe hardening of AI-generated or experimental applications into evaluable MVPsby applying secure-by-default architecture, containerization, API management,monitoring and deployment baselines.
• 7.Implementidentity and access controls using Microsoft Entra ID, role-based accesscontrol, Privileged Identity Management, Conditional Access and least-privilegepractices.
• 8.Developobservability capabilities using Azure Monitor, Log Analytics, dashboards andbusiness-relevant platform metrics covering cost, health, delivery, incidentsand compliance.
• 9.SupportFinOps and TCO transparency through resource tagging, budget alerts, costallocation, token-cost tracking and show back reporting to product owners.
• 10.Collaboratewith product owners, developers, security, audit, finance and leadershipstakeholders to ensure platform capabilities are practical, governed andaligned to business outcomes.
• 11.Documentreusable patterns, operating procedures and platform decisions to improveadoption, maintainability and knowledge retention.

Required Skills and Experience

• 1.10+years of hands-on engineering experience, including significant experiencedesigning, building, managing and operating cloud infrastructure on MicrosoftAzure in enterprise or regulated environments.
• 2.Deephands-on experience with Azure platform services such as Azure Landing Zones,Azure Policy, Azure Container Apps, Azure App Service, API Management, AzureMonitor, Log Analytics, Defender for Cloud and Azure Cost Management.
• 3.Hands-onexperience operating in Government Commercial Cloud (GCC) environments,including working within government cloud governance, security, compliance,identity, network and operational controls.
• 4.Extensivehands-on experience with infrastructure-as-code, automated provisioning andconfiguration management using Azure Bicep, Terraform or equivalent tools.
• 5.Extensiveexperience designing and operating CI/CD and GitOps pipelines using AzureDevOps, GitHub, ShipHATS or similar platforms, including automated build, test,security scanning, deployment promotion, rollback and release quality gates.
• 6.Stronghands-on experience applying DevSecOps practices and implementing platformguardrails, including secure software delivery, automated quality checks,secrets management, vulnerability scanning, policy-as-code and compliancecontrols.
• 7.Stronghands-on experience in identity and access engineering using Microsoft EntraID, RBAC, Conditional Access, PIM, access reviews and least-privilege accessgovernance.
• 8.PracticalAI literacy and experience using AI-assisted development tools such as Claude,GitHub Copilot, Microsoft Copilot or equivalent tools to improve softwaredelivery, code quality, documentation, testing or developer productivity.
• 9.Experienceintegrating, securing and operating AI/ML platform services on Azure, includingaccess controls, network security, service configuration, monitoring andproduction-readiness controls for AI-enabled applications.
• 10.Workingknowledge of Active Directory and enterprise identity integration concepts,including directory services, group-based access, authentication flows andhybrid identity considerations.
• 11.Workingknowledge of modern authentication and authorization standards, including SAML,OpenID Connect, OAuth 2.0, JWT and related enterprise application integrationpatterns.
• 12.Workingknowledge of containerization, APIs, cloud-native application patterns andproduction-readiness practices.
• 13.Experiencesupporting at least one production cloud-native application or shared platformcapability, with responsibility for reliability, monitoring, deployment oroperational support.
• 14.Abilityto translate platform architecture into reusable engineering patterns,templates, developer self-service capabilities and platform services thatproduct teams can consume with minimal friction.
• 15.Strongdocumentation and communication skills, with the ability to explain technicalconcepts to both engineering and non-technical stakeholders.
• 16.Comfortableworking in an agile, product-oriented environment where platform capabilitiesare built incrementally and improved through adoption feedback.

Preferred Skills

• 1.Experiencewith AI application platforms, Azure OpenAI, Microsoft Fabric, Synapse, dataproducts or AI governance patterns.
• 2.Experiencebuilding developer portals, internal platforms, platform APIs, self-serviceworkflows or golden-path engineering templates.
• 3.Familiaritywith public sector cloud environments, government security requirements orregulated enterprise environments.
• 4.Experiencewith observability, SRE practices, incident response automation, MicrosoftSentinel, alert routing and service health dashboards.
• 5.Understandingof FinOps practices, cloud cost optimization, TCO modelling and costaccountability mechanisms.
• 6.Exposureto tools such as Jira, Confluence, GitHub, Azure DevOps, ShipHATS, Copilot orother modern engineering productivity tools.