Senior Cloud Platform Engineer

United States Digital Space LLC; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Tekishub seeks an experienced Senior Cloud Platform Engineer to design, build, operate and continuously improve enterprise-grade cloud platform capabilities on Microsoft Azure. The role focuses on secure, scalable cloud infrastructure and platform services enabling product teams to deploy cloud-native solutions efficiently.

The candidate will work in regulated GCC environments, collaborating with engineering, security, architecture and product teams to implement DevSecOps, IaC, identity

Qualifications

• Bachelor's Degree or Diploma in Computer Science, IT, Engineering or a related discipline.
• 10+ years of hands-on cloud engineering, platform engineering or DevOps.
• Strong Azure infrastructure experience in enterprise or regulated environments.
• Experience with GCC environments and governance.
• Extensive hands-on with Terraform, Azure Bicep or similar IaC tools.
• CI/CD/GitOps pipelines using Azure DevOps, GitHub, ShipHATS.

Responsibilities

• Design, build, manage and operate secure and scalable cloud infrastructure on Microsoft Azure.
• Develop and maintain Azure platform capabilities including Landing Zones, Policy, Monitor and Cost Management.
• Support GCC environments with governance, security and compliance controls.
• Develop reusable infrastructure and automated provisioning with IaC technologies.
• Design and maintain CI/CD pipelines and GitOps workflows.
• Implement DevSecOps guardrails and secrets management.
• Collaborate with security, architecture and product teams in an agile environment.

Skills

Azure platform engineering

DevSecOps practices

Cloud governance

CI/CD automation

Identity and access governance

Platform engineering

Education

Bachelor's Degree or Diploma in Computer Science/IT/Engineering

Tools

Terraform

Azure Bicep

Azure DevOps

GitHub

ShipHATS

GitHub Copilot

Job description

Job Description

We are seeking an experienced Senior Cloud Platform Engineer to design, build, operate and continuously improve enterprise-grade cloud platform capabilities on Microsoft Azure.

The successful candidate will play a key role in developing secure, scalable and reusable cloud infrastructure and platform services that enable application and product teams to deploy and operate cloud‑native solutions efficiently. This role requires strong hands‑on expertise across Azure infrastructure, DevSecOps, infrastructure‑as‑code, identity and access management, CI/CD automation and cloud governance.

The role will involve working within enterprise and regulated cloud environments, including Government Commercial Cloud (GCC), while collaborating closely with engineering, security, architecture and product teams.

Key Responsibilities

• Design, build, manage and operate secure and scalable cloud infrastructure and platform services on Microsoft Azure.
• Develop and maintain Azure platform capabilities including Azure Landing Zones, Azure Policy, Azure Container Apps, Azure App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Azure Cost Management.
• Support cloud engineering and platform operations within Government Commercial Cloud (GCC) environments while adhering to applicable governance, security, compliance, identity and network controls.
• Develop reusable infrastructure and automated provisioning solutions using Azure Bicep, Terraform or equivalent infrastructure‑as‑code technologies.
• Design, implement and maintain CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.
• Automate build, testing, security scanning, deployment, release promotion, rollback and quality-gate processes.
• Implement DevSecOps practices and platform guardrails, including secrets management, vulnerability scanning, policy‑as‑code, automated security checks and compliance controls.
• Design and maintain identity and access controls using Microsoft Entra ID, RBAC, Conditional Access, Privileged Identity Management (PIM), access reviews and least‑privilege principles.
• Support enterprise identity integration involving Active Directory, directory services, authentication flows, group‑based access and hybrid identity environments.
• Implement and support modern authentication and authorization standards including SAML, OpenID Connect, OAuth 2.0 and JWT.
• Support the integration, security and operation of AI/ML services on Azure, including access controls, network security, monitoring, service configuration and production‑readiness requirements.
• Apply AI‑assisted development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent solutions to improve engineering productivity, testing, documentation and code quality.
• Support cloud‑native applications and shared platform capabilities with responsibility for deployment, monitoring, reliability and operational support.
• Develop reusable engineering patterns, templates, platform services and developer self‑service capabilities for application and product teams.
• Monitor platform reliability, security, performance and cloud costs and recommend continuous improvements.
• Produce and maintain clear technical documentation covering platform architecture, configurations, operational procedures and engineering standards.
• Collaborate with technical and non‑technical stakeholders in an agile, product‑oriented environment.

Requirements

• Bachelor's Degree or Diploma in Computer Science, Information Technology, Engineering or a related discipline.
• Minimum 10 years of relevant hands‑on engineering experience, with significant experience in cloud infrastructure, platform engineering, DevOps or related areas.
• Strong hands‑on experience designing, building and operating Microsoft Azure infrastructure in enterprise or regulated environments.
• Strong knowledge of Azure platform services, cloud governance, monitoring, security and cost management.
• Practical experience working with Government Commercial Cloud (GCC) environments is highly preferred.
• Extensive hands‑on experience with Terraform, Azure Bicep or equivalent infrastructure‑as‑code tools.
• Strong experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.
• Strong understanding and practical application of DevSecOps principles and secure software delivery practices.
• Hands‑on experience with Microsoft Entra ID, RBAC, Conditional Access, PIM and enterprise access governance.
• Working knowledge of Active Directory and enterprise/hybrid identity integration.
• Good understanding of OAuth 2.0, OpenID Connect, SAML, JWT and modern authentication and authorization patterns.
• Knowledge of containerisation, APIs, cloud‑native application architecture and production‑readiness practices.
• Experience supporting at least one production cloud‑native application or shared cloud platform.
• Exposure to securing and operating AI/ML services within Azure environments would be advantageous.
• Familiarity with AI‑assisted software development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent tools.
• Strong analytical, troubleshooting, documentation and communication skills.
• Ability to work effectively across engineering, architecture, security, product and business teams.
• Comfortable working in an agile environment and continuously improving platform capabilities based on user and product‑team feedback.

Preferred Skills

• Microsoft Azure certifications or relevant cloud/platform engineering certifications.
• Experience within Singapore Government or other highly regulated technology environments.
• Experience building internal developer platforms, reusable cloud engineering templates or developer self‑service capabilities.
• Knowledge of cloud security, FinOps, observability and platform reliability practices.

the company was established in 2008 in Wilmington Delaware, from this beginning the company has grown exponentially to include services and support locations across United States, Canada, India and the Singapore. TekisHub has ambitious plans to expand base in Australia, Middle East, APAC, United Kingdom next. With consultants deployed "on projects" worldwide, Tekishub brings together the right people and technologies to deliver the results to our clients.

Our executive team combines highly experienced members who help in providing technology and business consulting services to clients Globally. From a single expert consultant to an entire project team, Tekishub provides customized resource solutions through its project deliverable based and contingent workforce service options.