New opportunity

Senior IT Consultant (Cloud Engineering)

Singapore Institute of Technology · Singapore

About this role

The Senior IT Consultant (Cloud Engineering) is responsible for designing, building, and operating the University's cloud platforms on AWS and Azure. This role ensures that applications, integrations, and AI-enabled services are secure, reliable, and cost-effective. The position involves hands-on delivery, troubleshooting, and managing platform workstreams end-to-end. Responsibilities include cloud platform engineering, infrastructure as code (IaC) automation, DevSecOps, API management, and AI platform enablement. The consultant will specifically provision and operate cloud infrastructure for AI services, implement AI gateways for model access, and integrate agentic workflows. Requirements include a degree in a relevant technical discipline and at least 8 years of hands-on infrastructure or cloud engineering experience, with a minimum of 3 years focused on production workloads on AWS or Azure. Candidates must possess strong skills in Terraform, CI/CD pipelines, cloud networking, identity management, containerization, and scripting. Practical knowledge of generative AI cloud services and the use of AI tools in engineering is required. Preferred qualifications include experience with multi-account cloud environments, AI gateway development, event-driven integration, and relevant professional certifications such as AWS or Azure expert-level credentials.

For full details about this role, click “Apply on company site” to view the employer’s original posting.

Skills for this role

AWSMicrosoft AzureTerraformGitLab CI/CDGitHub ActionsPythonPowerShellBashDockerKubernetesAmazon EKSAmazon ECSAmazon API GatewayAzure API ManagementOAuth 2.0OpenID ConnectAmazon BedrockAzure AI FoundryAzure OpenAIModel Context ProtocolMicrosoft Copilot StudioFinOps

Checking your profile…

Preparation suggestions, not the employer’s actual interview questions. Always check the original posting for current requirements.

Understand the role

What matters most

Dual-Cloud Infrastructure Governance
You must design and operate production-grade environments across both AWS and Azure. The priority is maintaining consistency in security, networking, and identity management (Entra ID) while adhering to the AWS Well-Architected Framework and Azure Landing Zone standards. You will need to demonstrate how you manage multi-account environments and enforce guardrails using Infrastructure as Code (IaC) to ensure reliability.
AI Platform Enablement and Security
A core responsibility is provisioning infrastructure for generative AI services like Amazon Bedrock and Azure AI Foundry. You must implement AI gateways to manage model access, usage attribution, and content filtering. This requires balancing developer access to AI tools with strict adherence to PDPA and security standards for LLM and agentic applications.
Automated DevSecOps and API Management
You are expected to build secure CI/CD pipelines using GitLab or GitHub Actions, utilizing OIDC for secretless authentication. Simultaneously, you will manage the API lifecycle, ensuring that integrations are secure via OAuth 2.0/OIDC and resilient through proper throttling, caching, and circuit breaker patterns.

Likely challenges to think through

Managing Configuration Drift in Hybrid Environments
Maintaining reproducible environments across two major cloud providers while using Terraform can lead to configuration drift. Prepare by discussing your strategies for using HCP Terraform, state management, and automated remediation to ensure that development, staging, and production environments remain synchronized and compliant.
Balancing AI Innovation with Institutional Guardrails
The role requires enabling agentic workflows and AI services while maintaining strict security and cost controls. The challenge is implementing guardrails that do not stifle developer productivity. Prepare by explaining how you would design an AI gateway that provides visibility and security without creating bottlenecks for university teams.
Operational Reliability in a Regulated Environment
As a senior consultant in a higher education setting, you must manage production reliability and incident response while adhering to PDPA and internal security policies. Prepare to discuss how you handle root-cause analysis, disaster recovery planning, and FinOps practices to ensure cost-effective, compliant operations.

Practice your answers

Technical practice

Designing Multi-Account Cloud Foundations

What to coverExplain your approach to implementing AWS Control Tower or Azure Landing Zones. Focus on how you manage account vending, service control policies (SCPs), and Azure Policy to ensure governance while maintaining developer agility.

Infrastructure as Code (IaC) Lifecycle Management

What to coverDescribe your strategy for managing Terraform state and module versioning in a team environment. Discuss how you handle configuration drift and ensure that infrastructure remains reproducible across development, staging, and production.

Securing CI/CD Pipelines with OIDC

What to coverDetail how you implement OIDC federation between GitLab CI/CD or GitHub Actions and cloud providers. Explain why this is preferred over long-lived access keys and how it aligns with the principle of least privilege.

API Gateway and Security Patterns

What to coverDiscuss how you secure APIs using OAuth 2.0 and OpenID Connect. Address how you would apply the OWASP API Security Top 10 to protect against common threats while managing rate limits and throttling.

AI Platform Enablement and Guardrails

What to coverHow do you provision and secure services like Amazon Bedrock or Azure OpenAI? Explain your strategy for implementing an AI gateway to manage model access, logging, and content filtering guardrails.

Container Orchestration and Lifecycle

What to coverCompare your experience managing Amazon EKS or Azure Container Apps. Describe your process for handling cluster upgrades, patching, and ensuring high availability for production workloads.

Cloud Networking Fundamentals

What to coverExplain how you design hub-and-spoke network topologies using Transit Gateway or VNet peering. Include how you manage private connectivity to on-premises environments and secure traffic via private endpoints.

FinOps and Cost Optimization

What to coverDescribe your methodology for managing cloud costs in a large-scale environment. Mention specific techniques such as tagging strategies, rightsizing, and the use of Reserved Instances or Savings Plans.

Event-Driven Integration Architecture

What to coverProvide an example of when you would choose an event-driven architecture (e.g., using EventBridge or Azure Service Bus) over synchronous API calls. Discuss the trade-offs regarding complexity and system resilience.

Incident Response and Observability

What to coverHow do you approach root-cause analysis for production outages? Detail your use of monitoring tools like CloudWatch or Azure Monitor to establish effective alerting and logging for rapid incident triage.

Behavioural practice

Managing Conflicting Stakeholder Requirements

What to coverDescribe a situation where you had to balance the needs of development teams for speed with the security and governance requirements of the organization. How did you negotiate a solution that satisfied both?

Leading Through Technical Challenges

What to coverTell me about a time you owned a platform workstream that faced a significant technical roadblock. What steps did you take to troubleshoot the issue, and how did you ensure the project remained on track?

Collaboration with External Vendors

What to coverProvide an example of how you have coordinated with vendors or delivery partners to ensure their deliverables met your internal standards. How did you handle situations where their output required significant rework?

Adapting to New Technologies

What to coverDescribe a time you had to quickly learn and implement a new cloud service or AI tool to meet a business requirement. How did you validate your implementation and ensure it was production-ready?

Promoting a Culture of Security

What to coverGive an example of how you have influenced a team to adopt better DevSecOps practices, such as embedding security scanning into pipelines. How did you overcome resistance or lack of awareness?

Sharpen your knowledge

Topics to prepare

Cloud Governance and Multi-Account Strategy
The role requires managing complex environments using AWS Organizations/Control Tower and Azure Landing Zones. Review the Well-Architected Frameworks for both providers, focusing on account vending, service control policies (SCPs), and Azure Policy to ensure security and compliance at scale.
AI Platform Security and Gateway Architecture
The position involves securing AI services like Amazon Bedrock and Azure OpenAI. Study the OWASP Top 10 for LLM Applications and Agentic Applications. Focus on implementing AI gateways for token-based rate limiting, content filtering, and usage attribution to maintain governance over model access.
Secure DevSecOps and Identity Federation
Review the implementation of OIDC federation to eliminate long-lived credentials between CI/CD pipelines (GitLab/GitHub) and cloud providers. Focus on integrating Microsoft Entra ID for workload identity and applying least-privilege access across infrastructure and API layers.

Skills to revise

Infrastructure as Code (Terraform) Proficiency
Practice creating reusable, versioned Terraform modules. Exercise: Develop a module that provisions a private VPC/VNet with integrated security groups and private endpoints, ensuring state management is handled via HCP Terraform or remote backends.
API Management and Security
Gain hands-on experience with Amazon API Gateway or Azure API Management. Exercise: Configure an API endpoint protected by OAuth 2.0/OpenID Connect, implement rate limiting, and document the interface using OpenAPI 3.x specifications.
Container Orchestration and Automation
Demonstrate ability to manage container lifecycles on EKS or ECS. Exercise: Write a Python or Bash script to automate the deployment of a containerized service, including health checks and integration with a CI/CD pipeline that performs automated IaC scanning using tools like Checkov or Trivy.

Your preparation checklist

Prepare a Multi-Cloud Infrastructure Case Study
Develop a concise walkthrough of a production-grade project where you managed infrastructure on AWS or Azure. Highlight your experience with Terraform module development, remote state management, and how you enforced security guardrails using IaC scanning tools like Checkov or Trivy.
Demonstrate AI Platform Engineering Proficiency
Prepare to discuss your experience provisioning and securing generative AI services such as Amazon Bedrock or Azure OpenAI. Specifically, be ready to explain how you implemented an AI gateway for model access, managed token-based limits, and applied content filtering guardrails.
Showcase DevSecOps and Identity Integration
Outline your approach to building secure CI/CD pipelines using GitLab or GitHub Actions. Emphasize your use of OIDC federation to eliminate long-lived access keys and your experience integrating cloud platforms with Microsoft Entra ID for RBAC and secretless workload identity.
Formulate Technical Questions for the Interview
Prepare thoughtful questions regarding the university's current cloud maturity, such as: 'How does the team currently balance the agility of AI platform enablement with the strict governance requirements of a higher education environment?' or 'What are the primary challenges you face in managing multi-account AWS or Azure Landing Zone environments at scale?'
Review FinOps and Operational Resilience Strategies
Be prepared to discuss how you manage cloud costs and production reliability. Have concrete examples of how you have utilized FinOps practices like rightsizing and anomaly detection, as well as your experience designing disaster recovery plans with defined RPO and RTO targets.

Availability has not yet been verified. Status can change after a check; confirm on the employer’s website. Report an issue · Our checking policy

KEEP EXPLORING

Similar AI jobs

Related skills and specializations in Singapore. Matched to this role, not your profile.

Explore more jobs

Finding similar opportunities…