AWS Cloud Architect

Role Summary

We are seeking an experienced AWS Cloud Architect to join us. This is a dual-mandate role: you will ensure the reliability, security, and continuous evolution of our production IoT SaaS platform, while concurrently leading cloud architecture for our next-generation Intelligent Building Management System (iBMS). You will work hands-on with AWS-managed services and IoT protocol stacks, collaborating closely with firmware, backend, and product teams.

Key Responsibilities

• Own end-to-end AWS infrastructure for our SaaS products, ensuring high availability, low latency, and security.
• Manage AWS services for identity, databases, storage, and messaging in a multi-tenant environment.
• Maintain Kubernetes cluster health: scaling, RBAC, pod autoscaling, and upgrade cadence.
• Enforce security best practices: IAM least-privilege, network segmentation, device-to-cloud authentication, and compliance with SOC 2 / ISO 27001.
• Collaborate with firmware and backend teams on IoT device onboarding, OTA updates, and protocol integration.
• Lead cloud architecture for our next-generation Intelligent Building Management System (iBMS), spanning IoT, data, and AI layers.
• Own infrastructure cost governance, disaster recovery plans, and RTO/RPO commitments.

Required Qualifications & Experience

• AWS Certified Solutions Architect — Professional (mandatory); AWS Certified DevOps Engineer —Professional (advantageous).
• Proven experience designing event-driven, microservices architectures for multi-tenant SaaS products.
• Expert Python programming; intermediate Go; JavaScript/TypeScript/C/C++ advantageous.
• Deep proficiency with core AWS services: EKS, ECS, ECR, IAM, Cognito, API Gateway, S3, SNS, Route53,CloudFront, CloudWatch, and KMS.
• Hands-on Kubernetes administration (RBAC, HPA/VPA/KEDA, network policies) and Istio service mesh (mTLS, traffic management, observability).
• Infrastructure as Code using Terraform (preferred) or AWS CDK; CI/CD pipeline experience with GitHub Actions, GitLab CI, or Jenkins.
• Observability stack experience: Prometheus, Thanos, and Grafana.
• Familiarity with IoT protocols (MQTT, Modbus, LoRaWAN, Zigbee, BACnet/IP) and device provisioning patterns (X.509, OTA updates).
• Prior experience in an architect or principal engineer role, ideally in an IoT or SaaS environment.

Preferred Qualifications

• Experience developing cloud solutions compliant with ISO 27001, SOC 2, or Singapore CyberSG requirements.
• Background in smart building platforms, IBMS, SCADA, or building automation systems (BAS).
• Experience with Digital Twin platforms and related data models.
• Experience with payment gateway integrations and PCI-DSS compliance.
• Exposure to AI/ML workloads on AWS (SageMaker, Bedrock) for analytics or forecasting applications.
• Knowledge of Singapore BCA Green Mark requirements and smart building energy standards.

Core Competencies

Technical Leadership:

• Systems thinking — holistic design across stack layers
• Trade-off analysis (build vs. buy, consistency vs. availability)
• Security-first mindset in all design decisions
• Data-driven performance optimisation
• Ownership mentality for production reliability

Interpersonal & Delivery:

• Ability to communicate architecture to non-technicalstakeholders
• Strong written documentation habits (ADRs, runbooks, RFCs)
• Collaborative approach with firmware, product, and QA teams
• Calm under production incident pressure; structured incident command
• Self-directed; able to prioritise across parallel workstreams

What We Offer

• Dual mandate role with significant technical scope: live SaaS operations plus greenfield iBMS platform development.
• Opportunity to architect and build a next-generation Intelligent Building Management System from inception.
• Exposure to the full IoT stack: from field device protocols to cloud data platforms and AI-driven building analytics.
• Collaborative engineering culture with short decision cycles and direct access to product leadership.