AWS Cloud Architect - #1168773

Role Summary

We are seeking an experienced AWS Cloud Architect to join us. This is a dual-mandate role: you will ensure the reliability, security, and continuous evolution of our production IoT SaaS platform, while concurrently leading cloud architecture for our next-generation Intelligent Building Management System (iBMS). You will work hands-on with AWS-managed services and IoT protocol stacks, collaborating closely with firmware, backend, and product teams.

Key Responsibilities

• Own end-to-end AWS infrastructure for our SaaS products, ensuring high availability, low latency, and security.

• Manage AWS services for identity, databases, storage, and messaging in a multi-tenant environment.

• Maintain Kubernetes cluster health: scaling, RBAC, pod autoscaling, and upgrade cadence.

• Enforce security best practices: IAM least-privilege, network segmentation, device-to-cloud authentication, and compliance with SOC 2 / ISO 27001.

• Collaborate with firmware and backend teams on IoT device onboarding, OTA updates, and protocol integration.

• Lead cloud architecture for our next-generation Intelligent Building Management System (iBMS), spanning IoT, data, and AI layers.

• Own infrastructure cost governance, disaster recovery plans, and RTO/RPO commitments.

Required Qualifications & Experience

• AWS Certified Solutions Architect — Professional (mandatory); AWS Certified DevOps Engineer —Professional (advantageous).

• Proven experience designing event-driven, microservices architectures for multi-tenant SaaS products.

• Expert Python programming; intermediate Go; JavaScript/TypeScript/C/C++ advantageous.

• Deep proficiency with core AWS services: EKS, ECS, ECR, IAM, Cognito, API Gateway, S3, SNS, Route53, CloudFront, CloudWatch, and KMS.

• Hands-on Kubernetes administration (RBAC, HPA/VPA/KEDA, network policies) and Istio service mesh (mTLS, traffic management, observability).

• Infrastructure as Code using Terraform (preferred) or AWS CDK; CI/CD pipeline experience with GitHub Actions, GitLab CI, or Jenkins.

• Observability stack experience: Prometheus, Thanos, and Grafana.

• Familiarity with IoT protocols (MQTT, Modbus, LoRaWAN, Zigbee, BACnet/IP) and device provisioning patterns (X.509, OTA updates).

• Prior experience in an architect or principal engineer role, ideally in an IoT or SaaS environment.

Preferred Qualifications

• Experience developing cloud solutions compliant with ISO 27001, SOC 2, or Singapore CyberSG requirements.

• Background in smart building platforms, IBMS, SCADA, or building automation systems (BAS).

• Experience with Digital Twin platforms and related data models.

• Experience with payment gateway integrations and PCI-DSS compliance.

• Exposure to AI/ML workloads on AWS (SageMaker, Bedrock) for analytics or forecasting applications.

• Knowledge of Singapore BCA Green Mark requirements and smart building energy standards.

Core Competencies

Technical Leadership:

• Systems thinking — holistic design across stack layers

• Trade-off analysis (build vs. buy, consistency vs. availability)

• Security-first mindset in all design decisions

• Data-driven performance optimisation

• Ownership mentality for production reliability

Interpersonal & Delivery:

• Ability to communicate architecture to non-technicalstakeholders

• Strong written documentation habits (ADRs, runbooks, RFCs)

• Collaborative approach with firmware, product, and QA teams

• Calm under production incident pressure; structured incident command

• Self-directed; able to prioritise across parallel workstreams

What We Offer

• Dual mandate role with significant technical scope: live SaaS operations plus greenfield iBMS platform development.

• Opportunity to architect and build a next-generation Intelligent Building Management System from inception.

• Exposure to the full IoT stack: from field device protocols to cloud data platforms and AI-driven building analytics.

• Collaborative engineering culture with short decision cycles and direct access to product leadership.