Cloud Infrastructure Engineer (L2 - L4)

Job details: We are seeking L2 and L4 Cloud Infrastructure Engineers to design, build and operate cloud infrastructure across major public cloud platforms. The role covers the full cloud stack — from account setup, identity management and networking through to virtual compute, managed platform services, container workloads and GitOps deployment pipelines. You will manage infrastructure using code-based tools, build CI/CD pipelines and maintain cloud security and cost governance standards. Responsibilities: Provision and manage cloud accounts and environments following security and governance standards Design and maintain cloud IAM and RBAC across all providers — roles, policies, service accounts and key rotation Build and manage cloud networking — virtual networks, routing, VPN, DNS, WAF and cloud firewall rules Provision and scale IaaS compute instances with auto-scaling, load balancing and cost governance Manage PaaS services — deployment, scaling, access control and cost monitoring across all cloud providers Provision and maintain Kubernetes clusters; manage workloads, namespaces, RBAC and network policies Implement and operate Argo CD GitOps pipelines for application and infrastructure deployment Build and maintain CI/CD pipelines in GitHub Actions and Jenkins for build, hardening and promotion Manage cloud VM patching and golden image pipelines to maintain security compliance Monitor and respond to cloud security posture findings and privilege governance alerts Maintain cost governance dashboards and respond to budget threshold alerts Contribute to infrastructure as code repositories and participate in code review Job requirements: 2-5 years of relevant experience for L2 cloud infra engineer. 8-10+ years and above of relevant experience for L4 cloud infra engineer. Public cloud platforms — AWS, Microsoft Azure and Google Cloud Platform Cloud IAM and RBAC — roles, policies, service accounts, key rotation, MFA and SSO federation IaaS provisioning — compute instances, auto-scaling, load balancing and security groups PaaS management — managed databases, application services and serverless platforms Cloud networking — virtual networks, subnets, routing, VPN gateways, DNS and web application firewalls Cloud network virtual appliance firewalls and cloud-native security group management Kubernetes — EKS, AKS or GKE with Rancher; cluster management, namespaces, RBAC and network policies GitOps and continuous deployment — Argo CD; app-of-apps patterns, drift remediation and rollback CI/CD pipelines — GitHub Actions and Jenkins; build, test, lint, image pipeline and promotion workflows Infrastructure as code — Terraform for cloud resource provisioning across multiple providers AWS, Azure and GCP management — multi-cloud operations, governance and compliance Cloud security — posture management, CIS benchmarks, vulnerability scanning and privilege governance Cost governance — monitoring, alerting, right-sizing and tagging policy enforcement Cloud VM patching — cloud-native patch management services and image pipeline automation Observability integration — log forwarding, metrics ingestion and cloud-native monitoring Interested applicants please send your resume to venessagoh@recruitexpress.com.sg Venessa Goh Wee Ni R24124686 Recruit Express Pte Ltd EA License No: 99C4599 We regret that only shortlisted candidates will be contacted.