Role Summary

We are seeking an experienced AWS Cloud Architect to join us. This is a dual-mandate role: you will ensure the reliability, security, and continuous evolution of our production IoT SaaS platform, while concurrently leading cloud architecture for our next-generation Intelligent Building Management System (iBMS). You will work hands-on with AWS-managed services and IoT protocol stacks, collaborating closely with firmware, backend, and product teams.

Key Responsibilities

Own end-to-end AWS infrastructure for our SaaS products, ensuring high availability, low latency, and security.

Manage AWS services for identity, databases, storage, and messaging in a multi-tenant environment.

Maintain Kubernetes cluster health: scaling, RBAC, pod autoscaling, and upgrade cadence.

Enforce security best practices: IAM least-privilege, network segmentation, device-to-cloud authentication, and compliance with SOC 2 / ISO 27001.

Collaborate with firmware and backend teams on IoT device onboarding, OTA updates, and protocol integration.

Lead cloud architecture for our next-generation Intelligent Building Management System (iBMS), spanning IoT, data, and AI layers.

Own infrastructure cost governance, disaster recovery plans, and RTO/RPO commitments.

Required Qualifications & Experience

AWS Certified Solutions Architect — Professional (mandatory); AWS Certified DevOps Engineer —Professional (advantageous).

Proven experience designing event-driven, microservices architectures for multi-tenant SaaS products.

Expert Python programming; intermediate Go; JavaScript/TypeScript/C/C++ advantageous.

Deep proficiency with core AWS services: EKS, ECS, ECR, IAM, Cognito, API Gateway, S3, SNS, Route53, CloudFront, CloudWatch, and KMS.

Hands-on Kubernetes administration (RBAC, HPA/VPA/KEDA, network policies) and Istio service mesh (mTLS, traffic management, observability).

Infrastructure as Code using Terraform (preferred) or AWS CDK; CI/CD pipeline experience with GitHub Actions, GitLab CI, or Jenkins.

Observability stack experience: Prometheus, Thanos, and Grafana.

Familiarity with IoT protocols (MQTT, Modbus, LoRaWAN, Zigbee, BACnet/IP) and device provisioning patterns (X.509, OTA updates).

Prior experience in an architect or principal engineer role, ideally in an IoT or SaaS environment.

Preferred Qualifications

Experience developing cloud solutions compliant with ISO 27001, SOC 2, or Singapore CyberSG requirements.

Background in smart building platforms, IBMS, SCADA, or building automation systems (BAS).

Experience with Digital Twin platforms and related data models.

Experience with payment gateway integrations and PCI-DSS compliance.

Exposure to AI/ML workloads on AWS (SageMaker, Bedrock) for analytics or forecasting applications.

Knowledge of Singapore BCA Green Mark requirements and smart building energy standards.

Core Competencies

Technical Leadership:

Systems thinking — holistic design across stack layers

Trade-off analysis (build vs. buy, consistency vs. availability)

Security-first mindset in all design decisions

Data-driven performance optimisation

Ownership mentality for production reliability

Interpersonal & Delivery:

Ability to communicate architecture to non-technicalstakeholders

Strong written documentation habits (ADRs, runbooks, RFCs)

Collaborative approach with firmware, product, and QA teams

Calm under production incident pressure; structured incident command

Self-directed; able to prioritise across parallel workstreams

What We Offer

Dual mandate role with significant technical scope: live SaaS operations plus greenfield iBMS platform development.

Opportunity to architect and build a next-generation Intelligent Building Management System from inception.

Exposure to the full IoT stack: from field device protocols to cloud data platforms and AI-driven building analytics.

Collaborative engineering culture with short decision cycles and direct access to product leadership.