Senior Cloud Engineer

LEVEL: Senior (3-5 years of experience)

DURATION: 1 year onsite (initial)

TYPE: Onsite (Singapore)

EXPECTED START: ASAP

LANGUAGE PROFICIENCY: English - Fluent

WORKING TIME: Full-time, Singapore office hours (Mon - Fri)

EMPLOYEE TYPE: Official employee - Eastgate Software Singapore

  1   DESCRIPTION

Eastgate Software Singapore is looking for a Senior Cloud Engineer to work on-site with our client, SP Group, a leading energy utilities group in Singapore. You will own the cloud engineering scope needed to deliver and operationalise projects within SP Group's Microsoft Azure environment.

This is an official, full-time position with Eastgate Software Singapore, starting with an initial 1-year on-site assignment at SP Group.

Working on-site alongside the project's lead engineer, application engineers and DevSecOps engineer, you will design, build and run secure, well-governed Azure infrastructure, from environment setup through production cutover and Day 2 operations.

  2   RESPONSIBILITIES

• Own the cloud engineering scope required to deliver and operationalise projects within SP Group's Microsoft Azure environment.
• Design, provision, configure and maintain Azure infrastructure across non-production and production environments, in line with approved architecture, security and governance requirements.
• Translate the solution architecture into implementable cloud designs covering subscriptions, resource groups, networking, identity and access, compute, containers, storage, databases, integration services, monitoring, backup and recovery.
• Develop and maintain Infrastructure as Code (Terraform or other approved tooling) so environments are repeatable, version-controlled, traceable and recoverable.
• Implement cloud connectivity and network configuration, including virtual networks, subnets, routing, private endpoints, DNS, firewalls, application gateways and integration with hub-and-spoke services.
• Configure role-based access control, managed identities, service principals, secrets and certificates using least-privilege principles and approved access workflows.
• Collaborate with the lead engineer, application engineers and DevSecOps engineer on environment setup, application deployment, integration testing, release readiness and production cutover.
• Perform first-level diagnosis of cloud infrastructure, networking, identity, platform and deployment issues, coordinating with Infrastructure, network, cybersecurity and other stakeholders where privileged access or shared platform ownership is required.
• Review vendor-proposed cloud designs and configurations for alignment with the project architecture, SP Azure standards, security requirements, supportability and sustainable Day 2 operations.
• Implement monitoring, logging, alerting, backup, recovery, resilience, capacity and cost controls for the project's Azure resources.
• Support security reviews, vulnerability remediation, operational readiness assessments, disaster recovery exercises and audit evidence preparation.
• Work on-site with regular in-person collaboration with project stakeholders and access to SP-controlled environments and facilities.

  3   REQUIREMENTS

• 3-5 years of hands-on experience in cloud engineering, Azure infrastructure, platform engineering or cloud operations, including senior-level responsibility for production workloads.
• Proven experience delivering a cloud-native project from environment setup through production deployment and operational handover.
• Strong practical experience with Microsoft Azure: networking, identity and access, compute, containers, storage, databases, monitoring, security controls, backup, recovery and operational troubleshooting.
• Hands-on experience with Infrastructure as Code (preferably Terraform) and delivery platforms such as GitHub Actions, Azure DevOps or Jenkins.
• Experience with Azure networking patterns such as hub-and-spoke, private endpoints, DNS, routing, firewalls, application gateways and secure connectivity to internal or external systems.
• Experience with containers and Kubernetes, including cluster integration, configuration, ingress, scaling, observability and deployment troubleshooting.
• Working knowledge of Azure governance, resource policies, tagging, cost management, least-privilege access, secrets and certificate management, and audit requirements.
• Ability to critically review vendor-built solutions, identify cloud infrastructure and operational risks, and drive corrective action without taking over vendor accountability.
• Proficiency in at least one scripting or programming language (PowerShell, Python, Go or Bash) for cloud automation and operational tooling.
• Strong written and verbal communication skills, able to explain cloud risks and technical trade-offs to engineers, Infrastructure, network, cybersecurity, vendors and management.