Senior Cloud Engineer

BOND FINANCIAL GROUP PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Bond Financial Group Pte. Ltd. seeks a Senior Cloud Engineer to build, operate, and secure our cloud platform. The role is hands-on, delivers infrastructure as code, and ensures production reliability across environments.

You will manage networking, Kubernetes, CI/CD, DR testing, and ISO 27001:2022 evidence requirements, with on-call duties for 24x7 incident response. A strong background in regulated industries and relevant cloud certifications is preferred.

Qualifications

• 8+ years of hands-on infrastructure experience.
• Experience operating 24x7 production infrastructure with on-call support.
• Proficient in IaC-driven provisioning and Kubernetes in production.
• ISO 27001:2022 exposure is advantageous.
• Background in regulated industries is preferred.

Responsibilities

• Build and configure cloud infrastructure using IaC tooling across environments.
• Manage networking, secrets, and TLS lifecycle, DNS records.
• Operate Kubernetes clusters and CI/CD infrastructure; patch management.
• Maintain production reliability with monitoring and capacity management.
• Deliver DR testing and ISO 27001:2022 evidence.
• Respond to production incidents and perform root-cause analysis.
• Provide on-call coverage for 24x7 incident response.

Skills

Cloud infrastructure

Kubernetes

Terraform

IaC

Networking

Security hardening

Monitoring

Education

Bachelor's degree or higher in CS/IT/Engineering

Cloud certifications

Tools

Terraform

Kubernetes

CI/CD pipelines

AWS/Azure/GCP

Job description

The Senior Cloud Engineer is a hands-on infrastructure engineer responsible for building, operating, and securing the organisation's cloud platform. Reporting to the Infrastructure Lead, this role delivers infrastructure as code, maintains production reliability, and supports DR testing and ISO 27001:2022 evidence requirements.

Responsibilities :

Infrastructure Provisioning and Operations

• Build and configure cloud infrastructure using IaC tooling; follow IaC change controls across all environments.
• Manage networking (VPCs, security groups, firewall rules, DNS), secrets, and TLS certificate lifecycle.
• Operate and maintain Kubernetes clusters and CI/CD pipeline infrastructure; execute patch management within defined SLAs.
• Maintain production stability through monitoring, alerting, and capacity management; contribute to cost-efficiency initiatives.

DevSecOps and Compliance

• Implement GitOps workflows and platform engineering standards; apply security hardening across cloud environments.
• Document infrastructure controls and produce evidence to support the ISO 27001:2022 certification programme.
• Support third-party infrastructure service provider engagements at the technical level.

Business Continuity and Support

• Execute DR tests and maintain DR runbooks; produce DR test records as ISO 27001:2022 audit evidence.
• Respond to production incidents, perform root-cause analysis, and implement preventive improvements.
• On-call availability is required to support 24x7 incident response coverage.

Requirements

Experience

• 8+ years of hands-on infrastructure or platform engineering experience with production systems.
• Proven experience operating 24x7 production infrastructure including on-call incident response andDR execution.
• Experience with IaC-driven provisioning and Kubernetes in production; ISO 27001:2022 exposure advantageous.
• Background in regulated industries preferred; on-premise or hybrid infrastructure experience advantageous.
• Familiarity with MAS Technology Risk Management (TRM) Guidelines is a bonus.

Technical Skills

• Cloud infrastructure: provisioning, configuration, and security hardening (AWS, Azure, or GCP)
• Infrastructure as Code (IaC): Terraform, or equivalent
• Networking: LAN/WAN, VPCs, security groups, firewall rules, DNS, and TLS certificate management
• Container orchestration: Kubernetes cluster operations and CI/CD pipeline infrastructure
• DevSecOps practices: GitOps workflows and configuration management at scale
• Database infrastructure: deployment, high availability, and backup/recovery of distributed SQL databases (e.g. CockroachDB, PostgreSQL, or equivalent)
• Observability: monitoring, alerting, and incident management for 24x7 environments Secrets management and patch management

Qualifications

• Bachelor's degree or higher in Computer Science, IT, Engineering, or a related discipline.
• Cloud platform certifications (AWS, Azure, or GCP) preferred; ITIL advantageous.