Key Responsibilities
Cloud Operations & Infrastructure Support

Operate, maintain and support workloads and infrastructure running on across AWS, Azure and/or GCP, ensuring availability, performance and resilience targets are met.

Provision and manage cloud resources through Cloud Service Provider (CSP) accounts, using the platform’s automated account-vending and self-service capabilities.

Perform routine operational tasks: patching, backup and restore, capacity management, certificate and secrets rotation, and configuration management.

Support landing-zone and network configuration (segmentation, connectivity, DNS, load balancing) in line with platform standards.

Maintain operational runbooks, standard operating procedures and configuration documentation.
Monitoring, Incident & Problem Management

Implement and maintain monitoring, logging, alerting and observability across infrastructure and applications using cloud-native and platform tooling.

Respond to incidents and service requests within agreed SLAs; perform triage, diagnosis, escalation and resolution, including participation in an on-call roster.

Conduct root-cause analysis and drive problem management to prevent recurrence; contribute to post-incident reviews.

Support disaster-recovery planning, backup verification and recovery exercises (RPO/RTO objectives).
Automation & Infrastructure as Code

Build, maintain and version infrastructure using Infrastructure-as-Code (e.g. Terraform) and configuration-management tooling.

Develop automation scripts and pipelines to reduce manual effort, standardise deployments and improve consistency.

Support CI/CD pipelines and DevSecOps practices, integrating with tools such as SHIP-HATS where applicable.
Security, Compliance & Governance

Ensure all cloud activities comply with IM8, security policies and guardrails, including hardened baselines and CIS-aligned configurations.

Support Policy-as-Code controls for continuous security compliance, remediating drift and non-compliant resources.

Manage identity and access in line with least-privilege principles, using platform single-sign-on and approved access paths.

Support audit, vulnerability management and remediation activities, and maintain evidence for security reviews.
Cost Management & Optimisation

Monitor cloud consumption and support cost-optimisation initiatives (right-sizing, scheduling, reserved/committed-use planning, eliminating waste).

Provide usage and cost reporting and recommendations to agencies and stakeholders.

Collaboration & Stakeholder Engagement

Work with application teams, agency stakeholders, security teams and the cloud platform team to onboard, migrate and support workloads.

Provide technical guidance and knowledge transfer to agency users and junior engineers.

Contribute to service-improvement initiatives and operational maturity.
Required Qualifications & Experience

Typically, 3–6 years of hands-on experience in cloud engineering, cloud operations, infrastructure or DevOps

Demonstrable production experience operating workloads on at least one major cloud platform (AWS, Azure or GCP); multi-cloud exposure is an advantage.

Prior exposure to managed cloud landing-zone platforms is strongly preferred.
Technical Skills & Competencies

Cloud platforms: Compute, storage, networking, IAM, databases and serverless services on AWS, Azure and/or GCP.

Infrastructure as Code: Terraform (preferred); familiarity with CloudFormation, ARM/Bicep or Deployment Manager.

Automation & scripting: Python, Bash, PowerShell or equivalent.

Containers & orchestration: Docker and Kubernetes (EKS/AKS/GKE) is an advantage.

CI/CD & DevSecOps: Git-based pipelines, automated testing and deployment;

Monitoring & observability: CloudWatch, Azure Monitor, Cloud Operations Suite, or tools such as Prometheus, Grafana and the ELK stack.

Security & compliance: Cloud security baselines, IAM, encryption, network security, vulnerability management and Policy-as-Code concepts.

Networking: VPC/VNet design, subnets, routing, firewalls, VPN, DNS and load balancing.

Operations frameworks: ITIL-aligned incident, problem and change management; SRE practices.
Certifications (Preferred )

Associate- or Professional-level cloud certification, e.g. AWS Solutions Architect / SysOps Administrator, Microsoft Azure Administrator / Azure Solutions Architect, or Google Associate Cloud Engineer / Professional Cloud Architect.

HashiCorp Terraform Associate; Certified Kubernetes Administrator (CKA); or relevant security certifications are advantageous.
#LI-CTSAPAC