Senior Cloud Engineer
Level: Senior (3-5 years of experience)
Duration: 1 year onsite (initial)
Type: Onsite (Singapore)
Expected start: ASAP
Language proficiency: English - Fluent
Working time: Full-time, Singapore office hours (Mon - Fri)
Employee type: Official employee - Eastgate Software Singapore
Job Description
Eastgate Software Singapore is looking for a Senior Cloud Engineer to work on-site with our client, SP Group, a leading energy utilities group in Singapore. You will own the cloud engineering scope needed to deliver and operationalise projects within SP Group's Microsoft Azure environment.
This is an official, full-time position with Eastgate Software Singapore, starting with an initial 1-year on-site assignment at SP Group.
Working on-site alongside the project's lead engineer,
application engineers and DevSecOps engineer, you will design, build and run secure, well-governed Azure infrastructure, from environment setup through production cutover and Day 2 operations.
Responsibilities
Own the cloud engineering scope required to deliver and operationalise projects within SP Group's Microsoft Azure environment.
Design, provision, configure and maintain Azure infrastructure across non-production and production environments, in line with approved architecture, security and governance requirements.
Translate the solution architecture into implementable cloud designs covering subscriptions, resource groups, networking, identity and access, compute, containers, storage, databases, integration services, monitoring, backup and recovery.
Develop and maintain Infrastructure as Code (Terraform or other approved tooling) so environments are repeatable, version-controlled, traceable and recoverable.
Implement cloud connectivity and network configuration, including virtual networks, subnets, routing, private endpoints, DNS, firewalls, application gateways and integration with hub-and-spoke services.
Configure role-based access control, managed identities, service principals, secrets and certificates using least-privilege principles and approved access workflows.
Collaborate with the lead engineer, application engineers and DevSecOps engineer on environment setup, application deployment, integration testing, release readiness and production cutover.
Perform first-level diagnosis of cloud infrastructure, networking, identity, platform and deployment issues, coordinating with Infrastructure, network, cybersecurity and other stakeholders where privileged access or shared platform ownership is required.
Review vendor-proposed cloud designs and configurations for alignment with the project architecture, SP Azure standards, security requirements, supportability and sustainable Day 2 operations.
Implement monitoring, logging, alerting, backup, recovery, resilience, capacity and cost controls for the project's Azure resources.
Support security reviews, vulnerability remediation, operational readiness assessments, disaster recovery exercises and audit evidence preparation.
Work on-site with regular in-person collaboration with project stakeholders and access to SP-controlled environments and facilities.
Requirements
3-5 years of hands-on experience in cloud engineering, Azure infrastructure, platform engineering or cloud operations, including senior-level responsibility for production workloads.
Proven experience delivering a cloud-native project from environment setup through production deployment and operational handover.
Strong practical experience with Microsoft Azure: networking, identity and access, compute, containers, storage, databases, monitoring, security controls, backup, recovery and operational troubleshooting.
Hands-on experience with Infrastructure as Code (preferably Terraform) and delivery platforms such as GitHub Actions, Azure DevOps or Jenkins.
Experience with Azure networking patterns such as hub-and-spoke, private endpoints, DNS, routing, firewalls, application gateways and secure connectivity to internal or external systems.
Experience with containers and Kubernetes, including cluster integration, configuration, ingress, scaling, observability and deployment troubleshooting.
Working knowledge of Azure governance, resource policies, tagging, cost management, least-privilege access, secrets and certificate management, and audit requirements.
Ability to critically review vendor-built solutions, identify cloud infrastructure and operational risks, and drive corrective action without taking over vendor accountability.
Proficiency in at least one scripting or programming language (PowerShell, Python, Go or Bash) for cloud automation and operational tooling.
Strong written and verbal communication skills, able to explain cloud risks and technical trade-offs to engineers, Infrastructure, network, cybersecurity, vendors and management.