Senior Cloud Engineer

Bond Financial Group; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bond Financial Group is seeking a Senior Cloud Engineer to hands-on build, operate, and secure the cloud platform. You will implement IaC, manage Kubernetes and CI/CD, and drive security hardening and incident response. The role involves DR testing and ISO 27001:2022 audit evidence support.

The ideal candidate has 8+ years of production-scale infrastructure experience, familiarity with regulated environments, and cloud certifications. A 24x7 operations mindset and on-call readiness are essential.

Qualifications

• 8+ years of hands-on infrastructure or platform engineering experience with production systems.
• Experience with 24x7 production infrastructure including on-call incident response and DR execution.
• Experience with IaC-driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.

Responsibilities

• Build and configure cloud infrastructure using IaC tooling across environments.
• Manage networking (VPCs, security groups, firewall rules, DNS), secrets, and TLS certificate lifecycle.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infrastructure.
• Maintain production stability through monitoring, alerting, and capacity management.
• Conduct DR tests and maintain DR runbooks; produce DR test records as ISO 27001:2022 audit evidence.
• On-call availability to support 24x7 incident response.

Skills

Cloud infrastructure

IaC (Terraform)

Kubernetes operations

GitOps

Security hardening

Monitoring & incident response

Education

Bachelor's degree or higher

Cloud certifications (AWS/Azure/GCP)

Tools

Terraform

Cloud platforms (AWS/Azure/GCP)

CI/CD tooling

Job description

The Senior Cloud Engineer is a hands-on infrastructure engineer responsible for building, operating, and securing the organisation's cloud platform. Reporting to the Infrastructure Lead, this role delivers infrastructure as code, maintains production reliability, and supports DR testing and ISO 27001:2022 evidence requirements.

Key Responsibilities

Infrastructure Provisioning and Operations

• Build and configure cloud infrastructure using IaC tooling; follow IaC change controls across all environments.
• Manage networking (VPCs, security groups, firewall rules, DNS), secrets, and TLS certificate lifecycle.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infrastructure; execute patch management within defined SLAs.
• Maintain production stability through monitoring, alerting, and capacity management; contribute to cost-efficiency initiatives.

DevSecOps and Compliance

• Implement GitOps workflows and platform engineering standards; apply security hardening across cloud environments.
• Document infrastructure controls and produce evidence to support the ISO 27001:2022 certification programme.
• Support third-party infrastructure service provider engagements at the technical level.

Business Continuity and Support

• Execute DR tests and maintain DR runbooks; produce DR test records as ISO 27001:2022 audit evidence.
• Respond to production incidents, perform root-cause analysis, and implement preventive improvements.
• On-call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of hands-on infrastructure or platform engineering experience with production systems.
• Proven experience operating 24x7 production infrastructure including on-call incident response and DR execution.
• Experience with IaC-driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.
• Background in regulated industries preferred; on-premise or hybrid infrastructure experience advantageous.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• Cloud infrastructure: provisioning, configuration, and security hardening (AWS, Azure, or GCP)
• Infrastructure as Code (IaC): Terraform, or equivalent
• Networking: LAN/WAN, VPCs, security groups, firewall rules, DNS, and TLS certificate management
• Container orchestration: Kubernetes cluster operations and CI/CD pipeline infrastructure
• DevSecOps practices: GitOps workflows and configuration management at scale
• Database infrastructure: deployment, high availability, and backup/recovery of distributed SQL databases (e.g. CockroachDB, PostgreSQL, or equivalent)
• Observability: monitoring, alerting, and incident management for 24x7 environments
• Secrets management and patch management

Qualifications

• Bachelor's degree or higher in Computer Science, IT, Engineering, or a related discipline.
• Cloud platform certifications (AWS, Azure, or GCP) preferred; ITIL advantageous.