Forward Deployed Engineer - Cloud

About OneByZero OneByZero is a Frontier Systems Integrator building agentic AI systems for leading banks, telcos, insurers, and retailers across Asia Pacific. We work on mission-critical problems for organizations operating the region's financial and digital infrastructure. Operating exclusively on AWS, we combine deep technical expertise with strong partnership programs that enable innovation, scale, and delivery excellence. We build with people who are technically serious, outcome-focused, and passionate about solving complex enterprise challenges. The Role We are seeking an experienced Cloud Infrastructure Engineer to design, implement, and secure AWS cloud environments supporting large-scale data platforms. The role will focus on infrastructure provisioning, networking, security, automation, and governance within highly regulated environments. Note: Resources for this role are required to be onshore due to the classified nature of the environment. Key Responsibilities Design and provision AWS environments including VPCs, subnets, security groups, network ACLs, IAM roles, and encryption services. Implement and manage AWS Lake Formation infrastructure, data catalogs, permissions, and cross-account resource sharing. Build and maintain CI/CD pipelines integrated with SHIP-HATS and enterprise deployment frameworks. Configure secure cross-agency connectivity using VPC Peering, Transit Gateway, and AWS PrivateLink. Develop monitoring and governance capabilities using Amazon CloudWatch, AWS CloudTrail, and AWS Config. Implement role-based access control (RBAC), tag-based access control (TBAC), and fine-grained permissions frameworks. Provision and maintain development, testing, and pre-production environments aligned with production architecture. Implement security best practices including encryption at rest, encryption in transit, VPC endpoints, and secure access controls. Collaborate with technical leadership on reusable infrastructure patterns and deployment standards. Produce architecture documentation, infrastructure diagrams, operational runbooks, and code repositories. Participate in Agile ceremonies, sprint demos, and infrastructure design reviews. Requirements Required Skills & Experience 5+ years of experience in Cloud Infrastructure Engineering or Cloud Platform Engineering. Strong expertise in AWS networking including VPCs, Transit Gateway, PrivateLink, Security Groups, and IAM. Hands-on experience with Terraform, AWS CDK, or CloudFormation. Experience building and managing CI/CD pipelines using GitLab CI, AWS CodePipeline, or similar tools. Strong understanding of Linux administration and cloud security best practices. Experience implementing encryption, governance, and compliance controls in enterprise environments. Knowledge of Infrastructure as Code (IaC), automation, and cloud operational excellence principles. Good to Have Hands-on experience with SHIP-HATS (highly preferred). Experience with AWS Lake Formation cross-account architecture. Experience with Transit Gateway and large-scale multi-account AWS environments. Prior experience supporting Government Agencies, IMDA, or Public Sector cloud programs. Education Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline. Benefits What We Offer Competitive compensation benchmarked to market. The opportunity to work on AI transformation programmes that matter to the institutions millions of people in Asia Pacific depend on. A team that spans 10 markets, brings together some of the most experienced AI, data, and enterprise technology practitioners in the region, and moves fast without losing quality. Access to the AWS partnership programmes and frontier AI tooling that most firms in this region do not have. A firm that is building something genuinely new, with a leadership team that has scaled and delivered before. OneByZero is an equal opportunity employer. We are committed to building a diverse and inclusive team and welcome applications from candidates of all backgrounds. Why OneByZero Agentic AI in regulated enterprise is the hardest version of this problem. The clients are the institutions that run the financial infrastructure of Asia Pacific. The constraints are real. The stakes are high. OBZ is one of the few firms in the region doing this work at production scale in regulated industries, with an AWS partnership that puts you at the frontier of what is deployable. You will build systems that matter, work in squads small enough that your contribution is visible, and use AI coworkers as a genuine force multiplier. If you are at the start of your career and want to be shaped by the hardest agentic engineering problems in the region, this is where that happens. If you are experienced and want to work on problems that are still genuinely unsolved, this is also where that happens. Note - Only candidates with existing unrestricted work authorization in Singapore will be considered, as visa sponsorship is not available for this position