Senior Cloud Engineer
LEVEL: Senior (3-5 years of experience)
DURATION: 1 year onsite (initial)
TYPE: Onsite (Singapore)
EXPECTED START: ASAP
LANGUAGE PROFICIENCY: English - Fluent
WORKING TIME: Full-time, Singapore office hours (Mon - Fri)
EMPLOYEE TYPE: Official employee - Eastgate Software Singapore
1 DESCRIPTION
Eastgate Software Singapore is looking for a Senior Cloud Engineer to work on-site with our client, SP Group, a leading energy utilities group in Singapore. You will own the cloud engineering scope needed to deliver and operationalise projects within SP Group's Microsoft Azure environment.
This is an official, full-time position with Eastgate Software Singapore, starting with an initial 1-year on-site assignment at SP Group.
Working on-site alongside the project's lead engineer,
application engineers and DevSecOps engineer, you will design, build and run secure, well-governed Azure infrastructure, from environment setup through production cutover and Day 2 operations.
2 RESPONSIBILITIES
- Own the cloud engineering scope required to deliver and operationalise projects within SP Group's Microsoft Azure environment.
- Design, provision, configure and maintain Azure infrastructure across non-production and production environments, in line with approved architecture, security and governance requirements.
- Translate the solution architecture into implementable cloud designs covering subscriptions, resource groups, networking, identity and access, compute, containers, storage, databases, integration services, monitoring, backup and recovery.
- Develop and maintain Infrastructure as Code (Terraform or other approved tooling) so environments are repeatable, version-controlled, traceable and recoverable.
- Implement cloud connectivity and network configuration, including virtual networks, subnets, routing, private endpoints, DNS, firewalls, application gateways and integration with hub-and-spoke services.
- Configure role-based access control, managed identities, service principals, secrets and certificates using least-privilege principles and approved access workflows.
- Collaborate with the lead engineer, application engineers and DevSecOps engineer on environment setup, application deployment, integration testing, release readiness and production cutover.
- Perform first-level diagnosis of cloud infrastructure, networking, identity, platform and deployment issues, coordinating with Infrastructure, network, cybersecurity and other stakeholders where privileged access or shared platform ownership is required.
- Review vendor-proposed cloud designs and configurations for alignment with the project architecture, SP Azure standards, security requirements, supportability and sustainable Day 2 operations.
- Implement monitoring, logging, alerting, backup, recovery, resilience, capacity and cost controls for the project's Azure resources.
- Support security reviews, vulnerability remediation, operational readiness assessments, disaster recovery exercises and audit evidence preparation.
- Work on-site with regular in-person collaboration with project stakeholders and access to SP-controlled environments and facilities.
3 REQUIREMENTS
- 3-5 years of hands-on experience in cloud engineering, Azure infrastructure, platform engineering or cloud operations, including senior-level responsibility for production workloads.
- Proven experience delivering a cloud-native project from environment setup through production deployment and operational handover.
- Strong practical experience with Microsoft Azure: networking, identity and access, compute, containers, storage, databases, monitoring, security controls, backup, recovery and operational troubleshooting.
- Hands-on experience with Infrastructure as Code (preferably Terraform) and delivery platforms such as GitHub Actions, Azure DevOps or Jenkins.
- Experience with Azure networking patterns such as hub-and-spoke, private endpoints, DNS, routing, firewalls, application gateways and secure connectivity to internal or external systems.
- Experience with containers and Kubernetes, including cluster integration, configuration, ingress, scaling, observability and deployment troubleshooting.
- Working knowledge of Azure governance, resource policies, tagging, cost management, least-privilege access, secrets and certificate management, and audit requirements.
- Ability to critically review vendor-built solutions, identify cloud infrastructure and operational risks, and drive corrective action without taking over vendor accountability.
- Proficiency in at least one scripting or programming language (PowerShell, Python, Go or Bash) for cloud automation and operational tooling.
- Strong written and verbal communication skills, able to explain cloud risks and technical trade-offs to engineers, Infrastructure, network, cybersecurity, vendors and management.