Senior Cloud Infrastructure Engineer

CHARTERHOUSE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CHARTERHOUSE PTE. LTD. in Singapore is seeking a Senior Cloud Infrastructure Engineer to design, build, and operate enterprise cloud platforms across hybrid environments.

The role requires hands-on expertise in cloud architecture, infrastructure engineering, security, automation, and large-scale migration initiatives. You will stay actively involved in building and operating cloud environments, not just governance or strategy.

Qualifications

• 8+ years in cloud infrastructure and engineering roles.
• Hands-on Azure architecture and migrations experience.
• Regulated environments experience is advantageous.
• Experience delivering enterprise-scale cloud migrations across hybrid environments.

Responsibilities

• Design, implement, and operate secure, scalable cloud infrastructure across hybrid environments.
• Lead end-to-end cloud migrations from assessment to post-migration optimisation.
• Architect and manage Azure IaaS, PaaS, and SaaS aligned with enterprise standards.
• Develop infrastructure automation with Terraform or Bicep.
• Deliver cloud platform builds and transformation projects in a lean engineering team.
• Support after-hours migration and cutover activities with clear communication.

Skills

Cloud architecture

Infra engineering

DevOps practices

Security best practices

Migration leadership

Tools

Terraform

Bicep

Azure CLI

PowerShell

Kubernetes

Docker

GitHub Actions

Azure DevOps

Job description

Role Overview

We are seeking aSenior Cloud Infrastructure Engineerto design, build, and operate enterprise cloud platforms across hybrid environments. The successful candidate will have strong hands-on experience in cloud architecture, infrastructure engineering, security, automation, and large-scale migration initiatives.

This role requires a technically strong individual who remains actively involved in building and operating cloud environments. Candidates whose recent experience is primarily focused on governance, strategy, or managing delivery teams without hands‑on technical involvement will not be suitable.

Key Responsibilities

• Design, implement, and operate secure, scalable, and highly available cloud infrastructure solutions across hybrid environments.

• Lead end-to-end cloud migration initiatives, including assessment, architecture design, implementation, and post-migration optimisation.

• Architect and manage Azure IaaS, PaaS, and SaaS services aligned with enterprise standards and business requirements.

• Develop infrastructure automation capabilities using Infrastructure-as-Code tools such as Terraform and Bicep.

• Configure and optimise Azure networking components, including connectivity, security, and application delivery services.

• Manage Microsoft 365 and Exchange Online environments, including identity integration, security controls, and endpoint management.

• Implement cloud security best practices across identity, access management, governance, and threat protection.

• Support application modernisation initiatives, including legacy platform migration, cloud-native adoption, and API-driven architectures.

• Build and maintain DevOps capabilities through CI/CD automation, container platforms, and modern engineering practices.

• Deliver cloud platform builds, migrations, and transformation projects within a lean engineering environment.

• Participate in planned after-hours migration and cutover activities while effectively communicating technical solutions and business impact.

Requirements

• Minimum 8years of experience in cloud infrastructure and engineering roles, with at least 3years owning cloud architecture and solution design responsibilities.

• Experience working withinfinancial services or other highly regulated environmentsis highly advantageous.

• Must be actively hands‑on with cloud infrastructure engineering today, including designing, deploying, troubleshooting, and optimising cloud platforms.

• Proven experience designing and deliveringenterprise-scale cloud migrationsacross hybrid environments from planning through implementation.

• Strong expertise inMicrosoft Azure architecture and operations, including:

  - Azure Infrastructure-as-a-Service (IaaS)

  - Platform-as-a-Service (PaaS)

  - Software-as-a-Service (SaaS)

  - Azure CLI and PowerShell

  - Infrastructure-as-Code using Terraform or Bicep

• Strong Azure networking experience, including:

  - Azure Virtual Networks (VNet)

  - VPN Gateway

  - ExpressRoute

  - Azure Load Balancer

  - Application Gateway

  - Traffic Manager

  - Azure Firewall

  - Network Security Groups and security controls

• Hands‑on experience administeringMicrosoft 365 and Exchange Online, including:

  - Conditional Access

  - Email security controls

  - Intune device management

  - Endpoint compliance policies

• Strong understanding of cloud identity and security services, including:

  - Microsoft Entra ID

  - Role-Based Access Control (RBAC)

  - Privileged Identity Management (PIM)

  - Azure Key Vault

  - Microsoft Defender for Cloud

• Experience with application modernisation initiatives, including:

  - Legacy application migration

  - Azure Web Apps

  - API-based architecture and integration

  - Azure data platforms such as Azure SQL, Data Factory, Synapse, and Databricks

• Strong DevOps and automation experience, including:

  - CI/CD pipeline implementation

  - Docker containerisation

  - Kubernetes platforms

  - GitHub Actions or Azure DevOps

• Proven ability to independently deliver cloud platform implementations and migrations within a lean engineering team.

• Willingness to support scheduled after-hours implementation and cutover activities.

• Strong communication skills with the ability to explain technical decisions, risks, and business value to stakeholders.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).

• Microsoft Certified: Azure Administrator Associate (AZ-104).

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).

• Experience with additional cloud platforms such asAWS or Google Cloud Platform (GCP).

EA License no.: 16S8066 I Reg no.: R1110125

Only shortlisted applicants will be notified.