[LPS] L2 Cloud Engineer

We are seeking a Cloud Wintel Engineer (Level 2) with strong hands-on Windows administration experience and multi-cloud operational expertise to support the cloud infrastructure. This role requires at least 2 years of Wintel experience and a minimum of 1 year of cloud experience, predominantly on Amazon Web Services (AWS), with exposure to Microsoft Azure and Google Cloud Platform (GCP). The position focuses on maintaining and supporting Windows workloads across multi-cloud environments, ITIL processes, application deployment and troubleshooting, security hardening, and operational excellence in regulated network separation environments.Key ResponsibilitiesMulti-Cloud Windows OperationsProvide L2 operational support for Windows Server (2016/2019/2022/2025) in on-premises and multi-cloud environments.Support cloud operations predominantly on Amazon Web Services, Microsoft Azure and Google Cloud Platform.Hands-on experience with cloud services including: EC2, S3, IAM, EBS, CloudWatch, Systems Manager (SSM), AWS Backup, Security Groups, VPC, Azure Virtual Machines, Azure Storage, Azure Monitor, Azure Automation, Azure Backup, Compute Engine, Cloud Storage, Cloud Monitoring, Cloud IAMManage and support Active Directory, DNS, DHCP, Group Policy Objects (GPO), WSUS, and Windows clusteringMonitor and maintain Windows workload performance, availability, and ensure cloud security baseline across cloud platformsParticipate in 24/7 shift rotation to provide round-the-clock operational supportOperating System Patch ManagementPerform comprehensive OS patching for Windows Server environments using WSUS, SCCM, AWS Systems Manager, and Azure Update ManagementExecute monthly and quarterly patch cycles with coordination and approval workflowsUnderstand basic knowledge of Linux OS patching using YUM/DNF and cloud-native patch management toolsDeep expertise in Wintel Operating System patching, including pre-patch validation, deployment, and post-patch verificationTrack patch compliance and generate reports for audit and compliance purposesCoordinate patch windows and communicate with stakeholdersApplication Deployment & TroubleshootingDeploy and configure applications on Windows Server operating systemsTroubleshoot application issues at the OS level, including permissions, services, registry, and performanceSupport application teams with OS-level diagnostics and resolutionPerform application log analysis and performance tuningCollaborate with development teams to resolve infrastructure-related application problemsITIL & Service ManagementResolve incidents and service requests related to Wintel systems via ITSM platforms (ServiceNow, Jira, etc.)Follow ITIL processes for Incident, Problem, Change, and Request ManagementCreate and update tickets with detailed documentation and resolution stepsEscalate complex issues to Level 3 engineers and track resolution progressParticipate in Change Advisory Board (CAB) reviews and change implementationsMaintain SLAs and ensure timely ticket resolutionSecurity & ComplianceExecute CIS (Center for Internet Security) security remediations and hardening baselinesImplement and review IAM permissions using IAM Access Analyzer and least privilege modelPerform Vulnerability Management System (VMS) remediation based on scan findingsExecute Cloudscape recommendations in collaboration with InfoSec teamsWork on Security threat detection tools and perform remediationSupport security compliance scanning and remediation activitiesMaintain security configurations and monitor for security alertsImplement and maintain SSL certificate management and renewal processesContainer & DevSecOps AwarenessDemonstrate basic knowledge of container technologies (Docker, Kubernetes, ECS, EKS, AKS, GKE)Familiarity with DevSecOps practices and tools used in Singapore Government technology stack (SHIP-HATS)Support containerized Windows applications where applicableUnderstand CI/CD pipeline concepts and security integrationAutomation & ScriptingDevelop and maintain PowerShell scripts for routine tasks, automation, and remediationUtilize AWS CLI, Azure CLI, and gcloud CLI for cloud operationsCreate and execute SSM Documents for automated remediation and configuration managementAutomate repetitive operational tasks to improve efficiencyBackup & Disaster RecoveryImplement and maintain backup and recovery strategies for Windows servers in cloud environmentsPerform backup validations and participate in disaster recovery testingSupport business continuity planning activitiesDocument and test recovery proceduresDocumentation & Knowledge ManagementCreate and maintain technical documentation, knowledge articles, and standard operating procedures (SOPs)Document troubleshooting steps, configurations, and remediation proceduresMaintain runbooks for common operational tasksContribute to team knowledge base and continuous improvement initiativesMonitoring & ObservabilityConfigure and maintain monitoring using CloudWatch, Azure Monitor, and GCP Cloud MonitoringSet up alerts, alarms, and notifications for critical systemsAnalyze logs and metrics to identify and resolve issues proactivelySupport integration with centralized monitoring and observability platformsAudit & Compliance SupportParticipate in internal and external auditsProvide evidence and documentation for compliance requirementsSupport audit remediation activitiesMaintain compliance with government security frameworks and standardsSoft Skills & CompetenciesAnalytical Skills – Strong incident triage and root cause analysis under pressureProblem Solving – Effective troubleshooting of complex Windows and cloud issuesCommunication – Clear written and verbal communication; capable of producing documentation and interacting with stakeholdersCustomer Service – Ability to handle and communicate with demanding customers tactfully and professionallyOwnership – Proactive problem-solving mindset with accountability for service deliveryCollaboration – Team player with collaborative work ethicAdaptability – Willingness to learn new technologies and adapt to changing environmentsAttention to Detail – Accurate implementation and thorough documentationTime Management – Effective prioritization of tasks and ticketsResilience – Ability to work under pressure during incidents and critical situationsRequired QualificationsDiploma or Degree in Information Technology, Computer Science, or related disciplineMinimum 4 years of hands-on Wintel administration and support experienceMinimum 2 years of hands-on cloud experience supporting Cloud Windows workloadsStrong understanding of OS patching processes and patch management toolsExperience with ITIL practices and using ITSM ticketing systems (ServiceNow, Jira, etc.)Experience with application deployment and OS-level troubleshootingHands-on experience with CIS security hardening and remediationPowerShell scripting proficiency for automation and routine tasksBasic knowledge of Linux operating systemsExperience in regulated or secure environmentsAvailability for 24/7 shift rotation and on-call supportTechnical Skills & ExperienceAreaSkills RequiredOperating SystemsWindows Server (2012/2016/2019/2022/2025), basic Linux knowledgeCloud PlatformsAmazon Web Services, Microsoft Azure, Google Cloud PlatformWindows InfrastructureActive Directory, DNS, DHCP, GPO, WSUS, Clustering, File ServicesPatch ManagementWSUS, SCCM, AWS Systems Manager, Azure Update Management, basic YUM/DNFApplication SupportApplication deployment, OS-level troubleshooting, performance diagnosticsSecurity & HardeningCIS Benchmarks, IAM Access Analyzer, vulnerability remediation, EDR/XDR toolsCloud ServicesEC2, S3, IAM, CloudWatch, SSM, Azure VMs, GCP Compute EngineSecurity ToolsTrend Micro Vision One, Qualys, Tenable, AWS Config, Azure Security CenterScriptingPowerShell, AWS CLI, Azure CLI, gcloud CLIITIL & ITSMIncident/Problem/Change Management, ServiceNow, JiraBackup & RecoveryWindows Server Backup, AWS Backup, Azure Backup, DR proceduresContainersBasic knowledge of Docker, Kubernetes, and cloud container servicesDevSecOpsFamiliarity with SHIP-HATS and government DevSecOps frameworksPreferred CertificationsAWS Certified Solutions Architect – AssociateMicrosoft Certified: Azure Administrator AssociateCompTIA Security+ or similar security certificationLinux Professional Institute Certification (LPIC-1) or Red Hat Certified System Administrator (RHCSA)AWS Certified SysOps Administrator – AssociateMicrosoft Certified: Windows Server Hybrid Administrator AssociateITIL v3/v4 FoundationWork ArrangementsThis role requires participation in 24/7 shift rotation to support critical infrastructure operationsExtended work hours may be required during incidents, maintenance windows, and patching activitiesOn-call support responsibilities as part of rotation scheduleFlexibility to work outside normal office hours for change implementations and emergency responseTasks may regularly exceed normal office hours due to operational requirements