OpenSky Architect

Thales; Singapore; Hybrid; SGD 80,000 - 120,000; Full time

Job summary

A leading global technology company in Singapore is seeking a skilled Kubernetes Architect to design, implement, and secure enterprise-scale deployments across hybrid environments. The ideal candidate should have at least 7 years of experience in cloud-native platforms, deep expertise in Kubernetes, and strong skills in cybersecurity and compliance. This role offers an opportunity to work within an agile team, designing critical architectures that drive cutting-edge solutions in security and data management.

Benefits

Supportive workplace culture

Opportunities for professional growth

Qualifications

• At least 7 years in distributed systems or cloud-native platforms.
• Strong experience designing and operating Kubernetes.
• Familiarity with penetration testing and vulnerability management.

Responsibilities

• Design and document scaled Kubernetes deployments across multiple clusters.
• Integrate cybersecurity best practices into Kubernetes architecture.
• Build and maintain a self-service platform for developers.

Skills

Kubernetes

Cloud-native platforms

Cybersecurity principles

DevOps

Linux

Networking

Identity and access management

Security tools (Trivy, Aqua Security, Sysdig)

Communication skills

Education

Bachelor's in Computer Science or Information Technology

Recognized Engineering degree

Tools

Docker

Terraform

Helmfile

Prometheus

Grafana

OpenTelemetry

Job description

Location: Singapore, Singapore

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, Thales has been a trusted partner since 1973, originally focused on aerospace activities in the Asia‑Pacific region. With 2,000 employees across three local sites, we deliver cutting‑edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Whom We Are Looking For

We are seeking a highly skilled architect specializing in Kubernetes to join our team, to design, implement and secure enterprise‑scale containerized deployments across hybrid and multi‑cloud environments. The ideal candidate will combine deep technical expertise in Kubernetes and cloud‑native platforms with a strong understanding of cybersecurity principles, compliance frameworks and zero‑trust architectures.

The candidate would be working in an agile squad, in software delivery.

Responsibilities

• Architecture and Design
  • Design and document scaled Kubernetes deployments across multiple clusters, availability zones, and cloud providers
  • Define scalability, high availability and disaster recovery (DR) strategies for mission‑critical workloads.
  • Drive adoption of service mesh, GitOps, and multi‑tenant architectures for secure workload isolation.
• Security and Compliance
  • Integrate cybersecurity best practices into Kubernetes architecture, including RBAC, Pod Security Standards, network policies and supply chain security (SLSA v1.1, SBOMs).
  • Partner with Security to align deployments with compliance frameworks such as NIST, CIS Benchmarks (depending on regulatory requirements) with measurable control (e.g., patch SLAs, audit trails)
• Platform Engineering
  • Build and maintain self‑service platform for developers, with golden paths for CI/CD, observability.
  • Establish monitoring, logging, and tracing using Prometheus, Grafana, Loki, OpenTelemetry.
  • Standardize Infrastructure‑as‑Code (IaC) patterns using Terraform, Helmfile, and ArgoCD
  • Define golden image pipelines (e.g., continuous‑image‑patching‑pipeline where patched images are rebuilt and pushed automatically)
• Governance
  • Define a governance policy (cadence, automation, rollback) and ensure it aligns with SLAs and compliance requirements
  • Define a upgrade roadmap for Helmcharts, operators, CRDs, service meshes and observability stack, ensure that patching does not break workloads at scale.
• Collaboration and Leadership
  • Partner with Cloud, DevSecOps and Application Teams to deliver secure, production‑ready Kubernetes clusters.
  • Mentor engineering teams on Kubernetes design patterns, scaling strategies and secure coding practices for the following workloads archetypes:
    • Secure, fast data streaming (uni‑/bi‑directional)
    • Large scale data processing and transformation workloads,
  • Serve as a trusted advisor to senior leadership on cloud‑native strategy, cybersecurity risks, and technology roadmaps.

Education

• Bachelors in Computer Science or Information Technology
• Recognized Engineering degree

Essential Skills/Experience

• At least 7 years in distributed systems cloud‑native platforms or DevOps
• At least 4 years designing an operating Kubernetes
• Strong experience with Linux, container runtimes (docker, kaniko) and networking (Ciliu, Calico, Multus).
• Strong experience in identity and access management, cloud security models, encryption and compliance frameworks.
• Familiarity with thread modelling, penetration testing, vulnerability management and SOC practices
• Strong experience with security tools like Trivy, Aqua Security or Sysdig.
• Strong communication skills to articulate complex architectures to both technical and non‑technical stakeholders.

Desirable Skills/Experience

If you have the following desirable skills and relevant experiences, it would be an added advantage!

• Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS), Certified Kubernetes Application Developer (CKAD).
• Experience with Service Meshes (Istio, Linkerd, Consul).
• Familiarity with multi‑cluster, multi‑tenant or edge Kubernetes deployments.
• Knowledge of FinOps and cost optimization for Kubernetes workloads.

Essential / Desirable Traits

• Possess learning agility, flexibility and pro‑activity
• Comfortable with agile teamwork and user engagement

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.