Senior Cloud Infrastructure Engineer

Charterhouse Pte Ltd; Singapore; Hybrid; SGD 150,000 - 210,000; Full time

Job summary

Charterhouse Pte Ltd is seeking a Senior Cloud Infrastructure Engineer to design, build, and operate enterprise cloud platforms across hybrid environments. The role emphasizes hands-on cloud architecture, automation, and security, with experience in large-scale migrations and modernization initiatives.

The candidate will lead migrations, manage Azure IaaS/PaaS/SaaS, and drive DevOps through CI/CD and container platforms in a lean engineering setting.

Qualifications

• Minimum 8 years in cloud infrastructure roles.
• At least 3 years owning cloud architecture responsibilities.
• Strong hands-on in designing and operating cloud platforms.

Responsibilities

• Design, implement, and operate secure, scalable cloud infra across hybrid environments.
• Lead end-to-end cloud migrations from assessment to post-migration optimisation.
• Architect and manage Azure IaaS, PaaS, and SaaS aligned with enterprise standards.
• Develop infra automation using Terraform or Bicep.
• Configure and optimise Azure networking and security controls.
• Manage Microsoft 365 and Exchange Online environments including identity integration.
• Implement cloud security best practices across IAM and governance.
• Support application modernization including API-driven architectures.
• Build DevOps capabilities with CI/CD, containers, and modern dev practices.
• Deliver cloud platform builds and migrations in a lean team.

Skills

Cloud architecture

Automation & CI/CD

Azure expert

Security & IAM

Migration experience

DevOps mindset

Container platforms

Tools

Terraform

Bicep

Azure CLI

PowerShell

GitHub Actions

Azure DevOps

Docker

Kubernetes

Job description

Role Overview

We are seeking a Senior Cloud Infrastructure Engineer to design, build, and operate enterprise cloud platforms across hybrid environments. The successful candidate will have strong hands-on experience in cloud architecture, infrastructure engineering, security, automation, and large-scale migration initiatives.

This role requires a technically strong individual who remains actively involved in building and operating cloud environments. Candidates whose recent experience is primarily focused on governance, strategy, or managing delivery teams without hands-on technical involvement will not be suitable.

Key Responsibilities

• Design, implement, and operate secure, scalable, and highly available cloud infrastructure solutions across hybrid environments.

• Lead end-to-end cloud migration initiatives, including assessment, architecture design, implementation, and post-migration optimisation.

• Architect and manage Azure IaaS, PaaS, and SaaS services aligned with enterprise standards and business requirements.

• Develop infrastructure automation capabilities using Infrastructure-as-Code tools such as Terraform and Bicep.

• Configure and optimise Azure networking components, including connectivity, security, and application delivery services.

• Manage Microsoft 365 and Exchange Online environments, including identity integration, security controls, and endpoint management.

• Implement cloud security best practices across identity, access management, governance, and threat protection.

• Support application modernisation initiatives, including legacy platform migration, cloud-native adoption, and API-driven architectures.

• Build and maintain DevOps capabilities through CI/CD automation, container platforms, and modern engineering practices.

• Deliver cloud platform builds, migrations, and transformation projects within a lean engineering environment.

• Participate in planned after-hours migration and cutover activities while effectively communicating technical solutions and business impact.

Requirements

• Minimum 8 years of experience in cloud infrastructure and engineering roles, with at least 3 years owning cloud architecture and solution design responsibilities.

• Experience working within financial services or other highly regulated environments is highly advantageous.

• Must be actively hands-on with cloud infrastructure engineering today, including designing, deploying, troubleshooting, and optimising cloud platforms.

• Proven experience designing and delivering enterprise-scale cloud migrations across hybrid environments from planning through implementation.

• Strong expertise in Microsoft Azure architecture and operations, including:

• Azure Infrastructure-as-a-Service (IaaS)

• Platform-as-a-Service (PaaS)

• Software-as-a-Service (SaaS)

• Azure CLI and PowerShell

• Infrastructure-as-Code using Terraform or Bicep

• Strong Azure networking experience, including:

• Azure Virtual Networks (VNet)

• VPN Gateway

• ExpressRoute

• Azure Load Balancer

• Application Gateway

• Traffic Manager

• Azure Firewall

• Network Security Groups and security controls

• Hands-on experience administering Microsoft 365 and Exchange Online, including:

• Conditional Access

• Email security controls

• Intune device management

• Endpoint compliance policies

• Strong understanding of cloud identity and security services, including:

• Microsoft Entra ID

• Role-Based Access Control (RBAC)

• Privileged Identity Management (PIM)

• Azure Key Vault

• Microsoft Defender for Cloud

• Experience with application modernisation initiatives, including:

• Legacy application migration

• Azure Web Apps

• API-based architecture and integration

• Azure data platforms such as Azure SQL, Data Factory, Synapse, and Databricks

• Strong DevOps and automation experience, including:

• CI/CD pipeline implementation

• Docker containerisation

• Kubernetes platforms

• GitHub Actions or Azure DevOps

• Proven ability to independently deliver cloud platform implementations and migrations within a lean engineering team.

• Willingness to support scheduled after-hours implementation and cutover activities.

• Strong communication skills with the ability to explain technical decisions, risks, and business value to stakeholders.

Preferred Qualifications

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).

• Microsoft Certified: Azure Administrator Associate (AZ-104).

• Microsoft Certified: Azure Security Engineer Associate (AZ-500).

• Experience with additional cloud platforms such as AWS or Google Cloud Platform (GCP).

EA License no.: 16S8066 I Reg no.: R1110125

Only shortlisted applicants will be notified.