About the role
Job Description
Our client is a Frontier Systems Integrator building agentic AI systems for leading banks, telcos, insurers, and retailers across Asia Pacific. We work on mission-critical problems for organizations operating the region's financial and digital infrastructure. Operating exclusively on AWS, we combine deep technical expertise with strong partnership programs that enable innovation, scale, and delivery excellence. We build with people who are technically serious, outcome-focused, and passionate about solving complex enterprise challenges.
The Role We are seeking an experienced Engineer to design, implement, and secure AWS cloud environments supporting large-scale data platforms. The role will focus on infrastructure provisioning, networking, security, automation, and governance within highly regulated environments.
Note: Resources for this role are required to be onshore due to the classified nature of the environment.
Key Responsibilities
Design and provision AWS environments including VPCs, subnets, security groups, network ACLs, IAM roles, and encryption services.
Implement and manage AWS Lake Formation infrastructure, data catalogs, permissions, and cross-account resource sharing.
Build and maintain CI/CD pipelines integrated with SHIP-HATS and enterprise deployment frameworks.
Configure secure cross-agency connectivity using VPC Peering, Transit Gateway, and AWS PrivateLink.
Develop monitoring and governance capabilities using Amazon CloudWatch, AWS CloudTrail, and AWS Config.
Implement role-based access control (RBAC), tag-based access control (TBAC), and fine-grained permissions frameworks.
Provision and maintain development, testing, and pre-production environments aligned with production architecture.
Implement security best practices including encryption at rest, encryption in transit, VPC endpoints, and secure access controls.
Collaborate with technical leadership on reusable infrastructure patterns and deployment standards.
Produce architecture documentation, infrastructure diagrams, operational runbooks, and code repositories.
Participate in Agile ceremonies, sprint demos, and infrastructure design reviews.
What you’ll bring
Requirements
Required Skills & Experience
- 5+ years of experience in Cloud Infrastructure Engineering or Cloud Platform Engineering.
- Strong expertise in AWS networking including VPCs, Transit Gateway, PrivateLink, Security Groups, and IAM.
- Hands-on experience with Terraform, AWS CDK, or CloudFormation.
- Experience building and managing CI/CD pipelines using GitLab CI, AWS CodePipeline, or similar tools.
- Strong understanding of Linux administration and cloud security best practices.
- Experience implementing encryption, governance, and compliance controls in enterprise environments.
Good to Have
- Hands-on experience with SHIP-HATS (highly preferred).
- Experience with AWS Lake Formation cross-account architecture.
- Experience with Transit Gateway and large-scale multi-account AWS environments.
- Prior experience supporting Government Agencies, IMDA, or Public Sector cloud programs.
Education
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
Benefits and perks
Skills
Required
AWSCI/CDTerraformIAMCloudFormationAWS CDKSecurity
Nice to have
GitLab CIAWS CodePipelineLinuxCloud securityEncryptionGovernanceComplianceInfrastructure as codeAutomationCloudWatchCloudTrailAWS ConfigRBACAWS Lake Formation