Cloud Solutions Architect

Evolution Singapore; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Evolution Singapore is seeking an experienced Cloud Architect focused on Azure to own landing zone governance, network design, security controls, and platform modernisation. You will drive end-to-end cloud migrations, implement hub-and-spoke architectures, and lead platform services adoption to support business-critical operations.

The role requires hands-on engineering in Azure IaaS/PaaS/SaaS, DevOps practices, and strong communication to translate technical solutions into business value.

Qualifications

• 8+ years in cloud and infrastructure with design ownership.
• Proven hands-on cloud engineering in regulated financial services a plus.
• End-to-end cloud migration experience in hybrid environments.
• Strong expertise in Azure networking and platform services.

Responsibilities

• Own Azure landing zone: subscriptions, governance, policy controls.
• Design Azure network architecture: hub-and-spoke, peering, secure connectivity.
• Lead Azure Firewall and secure traffic between DMZ and production.
• Drive cloud migration strategy and execution with robust cutover plans.
• Modernise legacy apps using Azure Web Apps and platform services.
• Manage cloud data platform with Azure Data Factory, Synapse, Databricks.
• Oversee Microsoft 365/Exchange Online and Intune management.
• Develop disaster recovery, backup, monitoring, and cost optimisation.
• Ensure security controls across Entra ID, RBAC, Key Vault, Defender for Cloud.

Skills

Azure IaaS

Azure PaaS

Azure SaaS

Azure networking

Azure CLI

PowerShell

Terraform

Bicep

DevOps

Docker

Kubernetes

GitHub Actions

Azure DevOps

Entra ID

RBAC

Key Vault

Defender for Cloud

Disaster recovery

Tools

Azure CLI

PowerShell

Terraform

GitHub Actions

Azure DevOps

Docker

Kubernetes

Job description

Our client is a Singapore-based financial services firm with a strong technology-driven environment and operations across multiple markets in Asia and globally.

The technology function is supported by a lean team of experienced infrastructure engineers across Cloud, Network, Windows and Linux, working closely with Cybersecurity, Engineering, Trading and Research teams.

The organisation is undergoing a significant cloud transformation, with a strong focus on Azure, Microsoft 365 and modern infrastructure platforms. The environment values reliability, security, resilience and disciplined change management, particularly as technology platforms directly support business-critical operations.

Key Responsibilities

• Take ownership of the Azure landing zone, including subscription structure, management groups, governance frameworks, and policy controls tailored to the organisation’s scale.
• Design and implement the Azure network architecture together with the Network Architect, covering hub-and-spoke design, peering, security groups, and hybrid connectivity using Azure Arc, VPN Gateway and ExpressRoute.
• Lead the architecture and configuration of Azure Firewall, including forced tunnelling and traffic flow between DMZ and production environments.
• Drive cloud migration initiatives from strategy through execution, migrating on-premises workloads to Azure IaaS, PaaS and SaaS with robust cutover and rollback plans.
• Modernise and re-architect legacy applications using Azure Web Apps and other platform services to enhance scalability, resilience and API integration.
• Design and manage the cloud data platform, leveraging Azure Data Factory, Synapse Analytics, Databricks and Microsoft Purview for data governance and lineage.
• Manage Microsoft 365 and Exchange Online, including mailbox administration, conditional access and email security, as well as Intune device management and compliance.
• Develop and validate disaster recovery and backup solutions, while managing monitoring and alerting through Azure Monitor, Log Analytics and Application Insights.
• Drive cloud cost optimisation through autoscaling, resource right-sizing and reservation planning, while tracking spending and future forecasts.
• Implement and maintain cloud security controls across Entra ID, RBAC, Privileged Identity Management, Key Vault and encryption, ensuring alignment with relevant security and technology risk frameworks.

Requirements

• 8+ years of experience in cloud and infrastructure, with at least 3 years in cloud architecture and design ownership. Experience in regulated financial services is a plus.
• Strong hands-on cloud engineering experience, with a track record of actively building and managing cloud infrastructure rather than purely overseeing technical teams.
• Proven experience delivering end-to-end cloud migration projects across hybrid environments.
• Strong expertise in Azure IaaS, PaaS and SaaS, including Azure CLI, PowerShell and Infrastructure as Code using Terraform or Bicep.
• Solid knowledge of Azure networking, including Virtual Networks, VPN Gateway, ExpressRoute, Load Balancer, Application Gateway, Traffic Manager, Azure Firewall and security groups.
• Experience managing Microsoft 365 and Exchange Online, including Conditional Access, email security, Intune device management and compliance policies.
• Strong understanding of identity and cloud security, including Entra ID, RBAC, Privileged Identity Management, Key Vault and Defender for Cloud.
• Experience with application modernisation, including migrating legacy applications to Azure platform services, Azure Web Apps and API-based architecture, together with Azure data services such as Azure SQL, Data Factory, Synapse and Databricks.
• Experience with DevOps and infrastructure automation, including CI/CD, Docker, Kubernetes and GitHub Actions or Azure DevOps.
• Comfortable delivering cloud platform builds and migrations within lean teams, including supporting occasional out-of-hours cutover activities.
• Strong communication skills, with the ability to translate technical solutions into clear business value and outcomes.