Cloud Solution Architect

EVOLUTION RECRUITMENT SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

EVOLUTION RECRUITMENT SOLUTIONS PTE. LTD. (Singapore) is seeking an experienced Cloud Architect to own Azure landing zones, design network topology, and lead secure cloud migrations across hybrid environments.

You will modernise legacy apps, manage data platform services, and oversee Microsoft 365/Intune governance while driving cost optimisation and robust DR strategies.

Qualifications

• 8+ years in cloud and infrastructure with architecture ownership.
• Experience in regulated financial services is a plus.
• Hands-on cloud engineering and migration delivery across hybrid environments.
• Strong Azure IaaS, PaaS and SaaS, with IaC using Terraform or Bicep.
• Azure networking expertise and security, including Entra ID and RBAC.
• Experience with DevOps, CI/CD, and modernisation of legacy apps.

Responsibilities

• Own the Azure landing zone: subscription structure, governance, and policy.
• Design Azure network architecture with hub-spoke, peering, and ExpressRoute.
• Lead Azure Firewall, forced tunnelling, and DMZ production traffic flow.
• Drive cloud migration from on-prem to Azure IaaS/PaaS/SaaS with rollback plans.
• Modernise legacy apps using Azure Web Apps and platform services.
• Manage data platform with Azure Data Factory, Synapse, Databricks, Purview.
• Oversee Microsoft 365/Exchange Online, Intune, and security policies.
• Develop disaster recovery, monitoring, and cost optimisation strategies.
• Deliver lean, out-of-hours cutovers when required; translate tech to business value.

Skills

Azure Architecture

Cloud Engineering

Hybrid Cloud

Security & IAM

Networking

Tools

Azure CLI

Terraform

Bicep

PowerShell

Docker

Kubernetes

GitHub Actions

Azure DevOps

Job description

Our client is a Singapore-based financial services firm with a strong technology-driven environment and operations across multiple markets in Asia and globally.

The technology function is supported by a lean team of experienced infrastructure engineers across Cloud, Network, Windows and Linux, working closely with Cybersecurity, Engineering, Trading and Research teams.

The organisation is undergoing a significant cloud transformation, with a strong focus on Azure, Microsoft 365 and modern infrastructure platforms. The environment values reliability, security, resilience and disciplined change management, particularly as technology platforms directly support business-critical operations.

Key Responsibilities

• Take ownership of the Azure landing zone, including subscription structure, management groups, governance frameworks, and policy controls tailored to the organisation’s scale.
• Design and implement the Azure network architecture together with the Network Architect, covering hub-and-spoke design, peering, security groups, and hybrid connectivity using Azure Arc, VPN Gateway and ExpressRoute.
• Lead the architecture and configuration of Azure Firewall, including forced tunnelling and traffic flow between DMZ and production environments.
• Drive cloud migration initiatives from strategy through execution, migrating on-premises workloads to Azure IaaS, PaaS and SaaS with robust cutover and rollback plans.
• Modernise and re-architect legacy applications using Azure Web Apps and other platform services to enhance scalability, resilience and API integration.
• Design and manage the cloud data platform, leveraging Azure Data Factory, Synapse Analytics, Databricks and Microsoft Purview for data governance and lineage.
• Manage Microsoft 365 and Exchange Online, including mailbox administration, conditional access and email security, as well as Intune device management and compliance.
• Develop and validate disaster recovery and backup solutions, while managing monitoring and alerting through Azure Monitor, Log Analytics and Application Insights.
• Drive cloud cost optimisation through autoscaling, resource right-sizing and reservation planning, while tracking spending and future forecasts.
• Implement and maintain cloud security controls across Entra ID, RBAC, Privileged Identity Management, Key Vault and encryption, ensuring alignment with relevant security and technology risk frameworks.

Requirements

• 8+ years of experience in cloud and infrastructure, with at least 3 years in cloud architecture and design ownership. Experience in regulated financial services is a plus.
• Strong hands‑on cloud engineering experience, with a track record of actively building and managing cloud infrastructure rather than purely overseeing technical teams.
• Proven experience delivering end-to-end cloud migration projects across hybrid environments.
• Strong expertise in Azure IaaS, PaaS and SaaS, including Azure CLI, PowerShell and Infrastructure as Code using Terraform or Bicep.
• Solid knowledge of Azure networking, including Virtual Networks, VPN Gateway, ExpressRoute, Load Balancer, Application Gateway, Traffic Manager, Azure Firewall and security groups.
• Experience managing Microsoft 365 and Exchange Online, including Conditional Access, email security, Intune device management and compliance policies.
• Strong understanding of identity and cloud security, including Entra ID, RBAC, Privileged Identity Management, Key Vault and Defender for Cloud.
• Experience with application modernisation, including migrating legacy applications to Azure platform services, Azure Web Apps and API-based architecture, together with Azure data services such as Azure SQL, Data Factory, Synapse and Databricks.
• Experience with DevOps and infrastructure automation, including CI/CD, Docker, Kubernetes and GitHub Actions or Azure DevOps.
• Comfortable delivering cloud platform builds and migrations within lean teams, including supporting occasional out-of-hours cutover activities.
• Strong communication skills, with the ability to translate technical solutions into clear business value and outcomes.

Application

Please note that visa sponsorship is not available at this time.