Senior Cloud Platform Engineer – Digital Factory Platform

United States Digital Space LLC; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

CMC APAC Pte. Ltd. seeks a practical Senior Cloud Platform Engineer to design, build, and operate Azure-based platform capabilities across sandbox, QA, UAT, and production environments.

You will create reusable IaC templates (Bicep/Terraform) and self-service workflows, enabling rapid, secure deployments for product teams. You will own CI/CD pipelines, policy-as-code, and automated security checks, while integrating AI-enabled services on Azure and ensuring governance and cost awareness across

Qualifications

• 10+ years of hands-on engineering in Azure infrastructure.
• Experience with GCC environments and government security controls.
• IaC and automated provisioning expertise (Bicep, Terraform).
• CI/CD and GitOps pipelines on Azure DevOps, GitHub, ShipHATS.

Responsibilities

• Design, build, and operate Azure platform capabilities across environments.
• Develop reusable IaC and templates for environment provisioning.
• Build self-service golden paths for deployments and tooling.
• Design and maintain CI/CD pipelines and implement security guardrails.
• Secure and operate AI/ML platform services on Azure.

Skills

Azure infrastructure

Azure Landing Zones

Azure Policy

Azure Monitor

Azure Cost Management

IaC (Bicep/Terraform)

CI/CD pipelines

DevSecOps

GitOps

Security & compliance

AI on Azure

Tools

ShipHATS

Azure DevOps

GitHub

Terraform

Azure Bicep

Job description

About the Role

We are looking for a hands-on Senior Cloud Platform Engineer with practical AI literacy to help build and scale our Client’s Digital Factory Platform on Microsoft Azure .

The platform provides a self-service, governed, and automation-led foundation that enables product teams to move digital products and AI experiments from sandbox to production faster, securely, and with clear accountability.

The role will focus on reusable platform capabilities across Azure infrastructure, Infrastructure as Code, CI/CD, DevSecOps, identity and access, observability, FinOps, compliance automation, AI application hardening, and developer self-service .

Key Responsibilities

• Design, build, and operate Azure platform capabilities across sandbox, QA, UAT, and production environments.
• Develop reusable Infrastructure as Code (IaC) using Azure Bicep, Terraform, or equivalent tools.
• Build self-service golden paths for environment provisioning, application templates, deployments, access requests, and approved developer tooling.
• Design and maintain CI/CD pipelines using Azure DevOps, GitHub, ShipHATS , or equivalent platforms.
• Embed security and compliance controls through policy-as-code, automated security checks, quality gates, and platform guardrails .
• Harden AI-generated and experimental applications into production-ready MVPs through secure architecture, containerisation, API management, monitoring, and deployment standards.
• Implement identity and access controls using Microsoft Entra ID, RBAC, Privileged Identity Management (PIM), Conditional Access, and least-privilege practices .
• Develop observability capabilities using Azure Monitor, Log Analytics, dashboards, alerts, and platform health metrics .
• Support FinOps and TCO transparency through tagging, budget alerts, cost allocation, token-cost tracking, and showback reporting.
• Secure and operate Azure-based AI/ML platform services , including access controls, networking, monitoring, and production-readiness controls.
• Collaborate with developers, Product Owners, Security, Audit, Finance, and leadership stakeholders to ensure platform capabilities meet business and governance requirements.
• Develop reusable engineering patterns, templates, operating procedures, and platform documentation.
• Continuously improve platform capabilities based on adoption, operational metrics, and product-team feedback.

Required Skills & Experience

• 10+ years of hands-on engineering experience , with significant experience designing, building, managing, and operating Microsoft Azure infrastructure in enterprise or regulated environments.
• Strong hands-on experience with Azure Landing Zones, Azure Policy, Azure Container Apps, App Service, API Management, Azure Monitor, Log Analytics, Defender for Cloud, and Azure Cost Management .
• Hands-on experience operating within Government Commercial Cloud (GCC) environments, including government security, compliance, identity, networking, governance, and operational controls.
• Extensive experience with Azure Bicep, Terraform , or equivalent IaC and automated provisioning technologies.
• Extensive experience designing and operating CI/CD and GitOps pipelines using Azure DevOps, GitHub, ShipHATS, or similar platforms.
• Strong DevSecOps experience, including security scanning, secrets management, vulnerability management, policy-as-code, automated quality checks, compliance controls, deployment promotion, and rollback.
• Strong identity and access engineering experience with Microsoft Entra ID, RBAC, Conditional Access, PIM, access reviews, and least-privilege governance .
• Working knowledge of Active Directory and hybrid identity , including directory services, authentication flows, and group-based access.
• Understanding of authentication and authorisation standards, including SAML, OpenID Connect, OAuth 2.0, and JWT .
• Practical experience with containerisation, APIs, cloud-native architecture, and production-readiness practices .
• Experience supporting at least one production cloud-native application or shared platform capability, including deployment, reliability, monitoring, or operational support.
• Experience integrating, securing, and operating AI/ML services on Azure .
• Practical AI literacy and experience with AI-assisted development tools such as GitHub Copilot, Microsoft Copilot, Claude , or equivalent.
• Ability to translate platform architecture into reusable templates, engineering patterns, self-service workflows, and developer platform capabilities.
• Strong documentation, communication, and stakeholder management skills.
• Experience working in Agile and product-oriented engineering environments .

Preferred Skills

• Experience with Azure OpenAI, Microsoft Fabric, Synapse, AI application platforms, data products, or AI governance .
• Experience developing internal developer platforms, developer portals, platform APIs, self-service workflows, or golden-path templates .
• Experience in public-sector, government, or other regulated cloud environments.
• Knowledge of SRE, observability, Microsoft Sentinel, incident response automation, alert routing, and service-health dashboards .
• Understanding of FinOps, cloud cost optimisation, TCO modelling, showback, and cost accountability .
• Familiarity with Jira, Confluence, GitHub, Azure DevOps, ShipHATS, Copilot, and similar engineering productivity tools.

Ideal Candidate

The ideal candidate is a practical senior platform engineer who can turn cloud architecture into secure, reusable, automated platform capabilities .

You should be comfortable building Azure services, automating infrastructure and delivery pipelines, implementing security and compliance guardrails, and creating self-service capabilities that allow development teams to work faster with less operational friction.

You should also understand how to support AI-enabled applications in production and use AI-assisted engineering tools responsibly while maintaining security, reliability, governance, and accountability.

Why Join Us

This is an opportunity to help shape a strategic Digital Factory Platform that modernises how digital products and AI solutions are built and operated.

The role will directly contribute to improving developer productivity, cloud governance, security, automation, cost transparency, and the responsible adoption of AI across the organisation.

Company Overview – CMC APAC CMC APAC Pte. Ltd. , a member of CMC Global under CMC Corporation, is a Singapore-based regional hub delivering ICT and digital transformation solutions across the Asia-Pacific region.

As the Asia-Pacific arm of CMC Global, CMC APAC extends the Group’s technological expertise into one of the world’s most dynamic digital markets. Building on a strong foundation as a leading digital transformation (DX) provider in Vietnam, we serve as a strategic hub for delivering AI, Data, Cloud, and next-generation technology solutions across the region.

About CMC Global

CMC Global is a leading technology and AI transformation services provider, serving over 300 global clients across industries such as:

• Banking & Financial Services
• Healthcare
• Manufacturing
• Automotive

The company delivers end-to-end solutions in AI, Data, Cloud, and Digital Transformation, supporting enterprises in solving complex business challenges at scale.

Founded in 2017, CMC Global builds upon the long-standing legacy of CMC Corporation (established in 1993), one of Vietnam’s leading technology groups, with a vision to bring Vietnamese ICT solutions to the global market.

Global Presence & Capabilities

With an international network spanning Asia-Pacific, Europe, and North America, CMC Global provides:

• 24/7 global delivery capability
• Strong engineering talent pool
• Scalable and cost-effective delivery models

At CMC APAC, we combine global delivery excellence with local market expertise to support enterprises in achieving:

• Operational efficiency
• Business growth
• Sustainable, long-term value

Learn More

• CMC APAC: https://cmc-apac.sg/
• CMC Global: https://cmcglobal.com.vn/