Cloud Solutions Architect

Our client is a Singapore-based financial services firm with a strong technology-driven environment and operations across multiple markets in Asia and globally.The technology function is supported by a lean team of experienced infrastructure engineers across Cloud, Network, Windows and Linux, working closely with Cybersecurity, Engineering, Trading and Research teams.The organisation is undergoing a significant cloud transformation, with a strong focus on Azure, Microsoft 365 and modern infrastructure platforms. The environment values reliability, security, resilience and disciplined change management, particularly as technology platforms directly support business-critical operations.Key ResponsibilitiesTake ownership of the Azure landing zone, including subscription structure, management groups, governance frameworks, and policy controls tailored to the organisation’s scale.Design and implement the Azure network architecture together with the Network Architect, covering hub-and-spoke design, peering, security groups, and hybrid connectivity using Azure Arc, VPN Gateway and ExpressRoute.Lead the architecture and configuration of Azure Firewall, including forced tunnelling and traffic flow between DMZ and production environments.Drive cloud migration initiatives from strategy through execution, migrating on-premises workloads to Azure IaaS, PaaS and SaaS with robust cutover and rollback plans.Modernise and re-architect legacy applications using Azure Web Apps and other platform services to enhance scalability, resilience and API integration.Design and manage the cloud data platform, leveraging Azure Data Factory, Synapse Analytics, Databricks and Microsoft Purview for data governance and lineage.Manage Microsoft 365 and Exchange Online, including mailbox administration, conditional access and email security, as well as Intune device management and compliance.Develop and validate disaster recovery and backup solutions, while managing monitoring and alerting through Azure Monitor, Log Analytics and Application Insights.Drive cloud cost optimisation through autoscaling, resource right-sizing and reservation planning, while tracking spending and future forecasts.Implement and maintain cloud security controls across Entra ID, RBAC, Privileged Identity Management, Key Vault and encryption, ensuring alignment with relevant security and technology risk frameworks.Requirements8+ years of experience in cloud and infrastructure, with at least 3 years in cloud architecture and design ownership. Experience in regulated financial services is a plus.Strong hands-on cloud engineering experience, with a track record of actively building and managing cloud infrastructure rather than purely overseeing technical teams.Proven experience delivering end-to-end cloud migration projects across hybrid environments.Strong expertise in Azure IaaS, PaaS and SaaS, including Azure CLI, PowerShell and Infrastructure as Code using Terraform or Bicep.Solid knowledge of Azure networking, including Virtual Networks, VPN Gateway, ExpressRoute, Load Balancer, Application Gateway, Traffic Manager, Azure Firewall and security groups.Experience managing Microsoft 365 and Exchange Online, including Conditional Access, email security, Intune device management and compliance policies.Strong understanding of identity and cloud security, including Entra ID, RBAC, Privileged Identity Management, Key Vault and Defender for Cloud.Experience with application modernisation, including migrating legacy applications to Azure platform services, Azure Web Apps and API-based architecture, together with Azure data services such as Azure SQL, Data Factory, Synapse and Databricks.Experience with DevOps and infrastructure automation, including CI/CD, Docker, Kubernetes and GitHub Actions or Azure DevOps.Comfortable delivering cloud platform builds and migrations within lean teams, including supporting occasional out-of-hours cutover activities.Strong communication skills, with the ability to translate technical solutions into clear business value and outcomes.