Cloud Engineer - Architectural & Strategy (CPE)

Position Summary
The Cloud Engineer is responsible for designing, implementing, governing, and optimizing enterprise cloud platforms across AWS and Microsoft Azure. The role drives cloud transformation initiatives, establishes DevOps and Infrastructure as Code (IaC) practices, and ensures cloud environments are secure, scalable, resilient, and compliant with enterprise standards.

Collaborate with infrastructure, security, application, and business teams to deliver cloud-native and hybrid solutions while promoting automation, standardization, and operational excellence.

Roles & Responsibilities:

Cloud Architecture & Strategy

• Design cloud architectures across AWS and Azure. (AWS Organizations,VPC Architecture, EC2, Lambda, CloudTrail etc)
• Perform Cloud Service technical analysis covering cost, risk, implications, effort etc.
• Develop cloud adoption roadmaps, landing zones, and governance frameworks.
• Cloud architecture standards, reference architectures, and best practices.
• Cloud migration, modernization, and transformation initiatives.
• Review solution architectures for scalability, security, resiliency, and cost optimization.
• Establish multi-account and multi-subscription cloud operating models.

DevOps & Infrastructure as Code

• Design and implement Infrastructure as Code (IaC) frameworks using Terraform, OpenTofu, AWS CloudFormation, Azure Bicep and ARM Templates
• Develop reusable modules and automation patterns.
• Implement CI/CD pipelines for infrastructure and application deployment.
• Automate provisioning, configuration management, and compliance validation.
• Establish GitOps practices and infrastructure lifecycle management.
• Define DevSecOps controls within deployment pipelines.

Automation & Platform Engineering

• Develop cloud automation solutions using Python, Bash, PowerShell or YAML
• Build self-service cloud provisioning capabilities.
• Implement platform engineering and Internal Developer Platforms (IDP).
• Integrate monitoring, observability, and operational tooling.

Security & Governance

• Implement cloud security frameworks aligned to CIS Benchmarks, NIST, ISO 27001, MAS TRM and Government Cloud standards
• Define IAM strategies, Role-based access control (RBAC), Attribute-based access control (ABAC), Key Management, Secrets Management, Network Segmentation
• Design security controls using policy-as-code.

Operations & Reliability

• Define Disaster Recovery (DR), Business Continuity (BCP), Backup and Recovery Strategies and High Availability Architectures
• Establish SRE practices and operational standards.
• Conduct architecture reviews and cloud health assessments.
• Optimize cloud costs through FinOps practices.

Requirements/ Qualifications:

• Bachelor in Computer Engineering or equivalent 
• 8+ years in infrastructure, cloud, or enterprise architecture with hands-on AWS and Azure architecture experience.
• Strong Terraform development experience.
• AWS Certified Solutions Architect or AWS Certified DevOps Engineer
• Experience with GitHub Actions, GitLab CI/CD, Azure DevOps and Kubernetes expertise (EKS, AKS).
• Good networking knowledge of DNS, VPN, Direct Connect, ExpressRoute, Load Balancing, Firewalls and Proxy Solutions
• Experience with containerization technologies will be advantage 
• IaC & DevOps Skills - Terraform Enterprise/Cloud, Module development and governance, CI/CD design and implementation
• 1 year Agency Contract