Senior Cloud Platform Engineer

tekishub consulting services pte. ltd.; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Tekishub Consulting Services Pte. Ltd. seeks a Senior Cloud Platform Engineer to design, build and operate enterprise-grade cloud capabilities on Microsoft Azure. You’ll enable secure, scalable cloud infrastructure for product teams in GCC and regulated environments.

You will implement IaC with Terraform/Azure Bicep, build CI/CD pipelines, and enforce governance, security, and identity controls across complex environments. Singapore-based, collaborative, agile workflows are expected.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering or related field.
• 10+ years of hands-on engineering in cloud infrastructure, platform engineering, DevOps or related areas.
• Strong experience designing and operating Microsoft Azure infrastructure in enterprise/regul­ated environments.
• Know­ledge of Azure platform services, governance, monitoring, security and cost management.
• Experience with GCC environments is highly preferred.
• Hands-on with Terraform, Azure Bicep or alternative IaC tools.
• Designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar.
• Strong DevSecOps principles and secure software delivery practices.
• Experience with Microsoft Entra ID, RBAC, Conditional Access, PIM and enterprise access governance.
• Knowledge of Active Directory and hybrid identity integration.

Responsibilities

• Design, build, operate secure and scalable Azure infrastructure and platform services.
• Develop and maintain Azure Landing Zones, Policy, Container Apps, App Service, API Management and monitoring tools.
• Support GCC environments with governance, security, and compliance controls.
• Create reusable IaC patterns using Terraform, Azure Bicep or similar.
• Build CI/CD and GitOps pipelines using Azure DevOps, GitHub and ShipHATS.
• Automate build, testing, security checks, deployment and release processes.
• Implement DevSecOps guardrails and secrets management, vulnerability scanning and policy-as-code.
• Maintain identity and access controls with Entra ID, RBAC, PIM and conditional access.
• Support Active Directory integration and hybrid identity workflows.
• Implement modern authentication standards: OAuth2.0, OIDC, SAML, JWT.
• Support AI/ML services in Azure with access control and security monitoring.
• Leverage AI-assisted development tools to improve productivity and quality.
• Provide operational support for cloud-native apps and platform services.
• Develop reusable engineering patterns and self-service capabilities.
• Monitor reliability, security, and cloud costs; recommend improvements.
• Produce technical documentation and collaborate with cross-functional teams.

Skills

Azure

Terraform

Azure Bicep

CI/CD

DevSecOps

Policy as code

Entra ID

RBAC

OpenID Connect

SAML

Education

Bachelor's Degree in CS/IT/Engineering

Tools

Azure DevOps

GitHub

ShipHATS

Job description

Job Description

We are seeking an experienced Senior Cloud Platform Engineer to design, build, operate and continuously improve enterprise-grade cloud platform capabilities on Microsoft Azure.

The successful candidate will play a key role in developing secure, scalable and reusable cloud infrastructure and platform services that enable application and product teams to deploy and operate cloud-native solutions efficiently. This role requires strong hands‑on expertise across Azure infrastructure, DevSecOps, infrastructure-as-code, identity and access management, CI/CD automation and cloud governance.

The role will involve working within enterprise and regulated cloud environments, including Government Commercial Cloud (GCC), while collaborating closely with engineering, security, architecture and product teams.

Key Responsibilities

• Design, build, manage and operate secure and scalable cloud infrastructure and platform services on Microsoft Azure.

• Develop and maintain Azure platform capabilities including Azure Landing Zones, Azure Policy, Azure Container Apps, Azure App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud and Azure Cost Management.

• Support cloud engineering and platform operations within Government Commercial Cloud (GCC) environments while adhering to applicable governance, security, compliance, identity and network controls.

• Develop reusable infrastructure and automated provisioning solutions using Azure Bicep, Terraform or equivalent infrastructure‑as‑code technologies.

• Design, implement and maintain CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.

• Automate build, testing, security scanning, deployment, release promotion, rollback and quality‑gate processes.

• Implement DevSecOps practices and platform guardrails, including secrets management, vulnerability scanning, policy-as-code, automated security checks and compliance controls.

• Design and maintain identity and access controls using Microsoft Entra ID, RBAC, Conditional Access, Privileged Identity Management (PIM), access reviews and least‑privilege principles.

• Support enterprise identity integration involving Active Directory, directory services, authentication flows, group‑based access and hybrid identity environments.

• Implement and support modern authentication and authorization standards including SAML, OpenID Connect, OAuth 2.0 and JWT.

• Support the integration, security and operation of AI/ML services on Azure, including access controls, network security, monitoring, service configuration and production‑readiness requirements.

• Apply AI‑assisted development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent solutions to improve engineering productivity, testing, documentation and code quality.

• Support cloud‑native applications and shared platform capabilities with responsibility for deployment, monitoring, reliability and operational support.

• Develop reusable engineering patterns, templates, platform services and developer self‑service capabilities for application and product teams.

• Monitor platform reliability, security, performance and cloud costs and recommend continuous improvements.

• Produce and maintain clear technical documentation covering platform architecture, configurations, operational procedures and engineering standards.

• Collaborate with technical and non‑technical stakeholders in an agile, product‑oriented environment.

Requirements

• Bachelor's Degree or Diploma in Computer Science, Information Technology, Engineering or a related discipline.

• Minimum 10 years of relevant hands‑on engineering experience, with significant experience in cloud infrastructure, platform engineering, DevOps or related areas.

• Strong hands‑on experience designing, building and operating Microsoft Azure infrastructure in enterprise or regulated environments.

• Strong knowledge of Azure platform services, cloud governance, monitoring, security and cost management.

• Practical experience working with Government Commercial Cloud (GCC) environments is highly preferred.

• Extensive hands‑on experience with Terraform, Azure Bicep or equivalent infrastructure‑as‑code tools.

• Strong experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS or similar platforms.

• Strong understanding and practical application of DevSecOps principles and secure software delivery practices.

• Hands‑on experience with Microsoft Entra ID, RBAC, Conditional Access, PIM and enterprise access governance.

• Working knowledge of Active Directory and enterprise/hybrid identity integration.

• Good understanding of OAuth 2.0, OpenID Connect, SAML, JWT and modern authentication and authorization patterns.

• Knowledge of containerisation, APIs, cloud‑native application architecture and production‑readiness practices.

• Experience supporting at least one production cloud‑native application or shared cloud platform.

• Exposure to securing and operating AI/ML services within Azure environments would be advantageous.

• Familiarity with AI‑assisted software development tools such as GitHub Copilot, Microsoft Copilot, Claude or equivalent tools.

• Strong analytical, troubleshooting, documentation and communication skills.

• Ability to work effectively across engineering, architecture, security, product and business teams.

• Comfortable working in an agile environment and continuously improving platform capabilities based on user and product‑team feedback.

Preferred Skills

• Microsoft Azure certifications or relevant cloud/platform engineering certifications.

• Experience within Singapore Government or other highly regulated technology environments.

• Experience building internal developer platforms, reusable cloud engineering templates or developer self‑service capabilities.

• Knowledge of cloud security, FinOps, observability and platform reliability practices.