Senior Cloud Engineer

BOND FINANCIAL GROUP PTE. LTD.; Shenton Way; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bond Financial Group PTE. LTD. seeks an experienced Infrastructure Engineer to design and run scalable cloud platforms.

You will implement IaC (Terraform), manage Kubernetes clusters, and oversee secure networking, DNS, and TLS lifecycle for reliable production systems. The role requires 8+ years in production infrastructure, on-call incident response, and familiarity with ISO 27001:2022. You will participate in DR drills, cost optimization, and vendor engagements within a hybrid/Singapore

Qualifications

• 8+ years hands-on infrastructure or platform engineering experience with production systems.
• Experience with IaC-driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.
• Background in regulated industries or on-premise/hybrid infrastructure preferable.

Responsibilities

• Build and operate cloud infrastructure with IaC tooling; enforce change controls across environments.
• Manage networking, secrets, DNS, TLS lifecycle; ensure security and compliance.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infra; patch management.
• Maintain production stability with monitoring, alerts, and capacity planning; drive cost-efficiency.
• Execute DR tests and document runbooks; provide ISO 27001 audit evidence.
• Respond to production incidents; perform root-cause analysis and preventive actions.
• On-call availability for 24x7 incident response.

Skills

Cloud infrastructure

Terraform

Kubernetes

GitOps

Security hardening

Disaster recovery

Monitoring & incident mgmt

On-call support

ISO 27001 familiarity

Education

Bachelor's degree in CS/IT/Engineering

Cloud certifications (AWS/Azure/GCP)

Tools

AWS/Azure/GCP

CockroachDB/PostgreSQL

Job description

Responsibilities

Infrastructure Provisioning and Operations

• Build and configure cloud infrastructure using IaC tooling; follow IaC change controls across all environments.
• Manage networking (VPCs, security groups, firewall rules, DNS), secrets, and TLS certificate lifecycle.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infrastructure; execute patch management within defined SLAs.
• Maintain production stability through monitoring, alerting, and capacity management; contribute to cost-efficiency initiatives.

DevSecOps and Compliance

• Implement GitOps workflows and platform engineering standards; apply security hardening across cloud environments.
• Document infrastructure controls and produce evidence to support the ISO 27001:2022 certification programme.
• Support third‑party infrastructure service provider engagements at the technical level.

Business Continuity and Support

• Execute DR tests and maintain DR runbooks; produce DR test records as ISO 27001:2022 audit evidence.
• Respond to production incidents, perform root‑cause analysis, and implement preventive improvements.
• On‑call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of hands‑on infrastructure or platform engineering experience with production systems.
• Proven experience operating 24x7 production infrastructure including on-call incident response andDR execution.
• Experience with IaC‑driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.
• Background in regulated industries preferred; on‑premise or hybrid infrastructure experience advantageous.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• Cloud infrastructure: provisioning, configuration, and security hardening (AWS, Azure, or GCP)
• Infrastructure as Code (IaC): Terraform, or equivalent
• Networking: LAN/WAN, VPCs, security groups, firewall rules, DNS, and TLS certificate management
• Container orchestration: Kubernetes cluster operations and CI/CD pipeline infrastructure
• DevSecOps practices: GitOps workflows and configuration management at scale
• Database infrastructure: deployment, high availability, and backup/recovery of distributed SQLdatabases (e.g. CockroachDB, PostgreSQL, or equivalent)
• Observability: monitoring, alerting, and incident management for 24x7 environments- Secrets management and patch management

Qualifications

• Bachelor's degree or higher in Computer Science, IT, Engineering, or a related discipline.
• Cloud platform certifications (AWS, Azure, or GCP) preferred; ITIL advantageous.