Cloud Security Architect

Note: Open to Malaysians and EP candidates only due to urgency of the project

Job Description:

• Design, implement and maintain secure, highly available, resilient and scalable Alibaba Cloud architectures for high-traffic, public-facing mobile platforms.
• Lead cloud architecture design covering landing zones, VPCs, hybrid connectivity, networking, compute, storage, databases, APIs and cloud-native services.
• Implement and optimise Alibaba Cloud services, including ECS, ACK/Kubernetes, Function Compute, ApsaraDB RDS/PolarDB, Tair, OSS, CDN, ALB/SLB, API Gateway and ApsaraMQ.
• Design and implement cloud security controls using RAM, KMS, Security Center, Cloud Firewall, WAF, Anti-DDoS, Bastionhost, ActionTrail and Data Security Center.
• Conduct threat modelling, security assessments and vulnerability remediation to protect sensitive personal data and public-facing APIs.
• Establish infrastructure automation and standardisation using Terraform and Infrastructure as Code (IaC).
• Implement high availability, disaster recovery, monitoring, incident response and operational resilience practices.
• Ensure cloud architecture and security controls align with applicable Malaysian regulatory requirements, including PDPA 2010 and the Cyber Security Act 2024, as well as ISO 27001 where applicable.
• Collaborate with application, infrastructure, security and business teams to define architecture standards, document technical solutions and communicate recommendations to stakeholders.

Requirements:

• Minimum 8 years of experience in IT infrastructure, cloud engineering or cloud architecture.
• At least 3 years of hands-on Alibaba Cloud architecture and implementation experience.
• Proven experience designing and operating secure, highly available cloud platforms supporting at least 1 million users or comparable peak workloads.
• Strong hands-on knowledge of Alibaba Cloud compute, networking, storage, database, API and cloud-native services.
• Minimum 4 years of experience designing or operating cloud security controls for production systems handling sensitive personal data.
• Strong knowledge of Alibaba Cloud security services, including Security Center, Cloud Firewall, WAF, Anti-DDoS, KMS, RAM and ActionTrail.
• Experience with Kubernetes, preferably Alibaba Cloud ACK, and Terraform or other Infrastructure as Code tools.
• Strong understanding of cloud security architecture, threat modelling, vulnerability assessment and penetration testing (VAPT), OWASP API Security Top 10 and/or OWASP MASVS.
• Experience with security monitoring, SOC/SIEM integration and incident response.
• Knowledge of Malaysian data protection and cybersecurity regulations, particularly PDPA 2010 and the Cyber Security Act 2024, and familiarity with ISO 27001.
• Strong analytical, troubleshooting, documentation, communication and stakeholder management skills.

Preferred Qualifications:

• Alibaba Cloud ACP/ACE certification, preferably in Cloud Security.
• CISSP, CCSP or CCSK certification.
• Experience in Malaysian government or government-linked company (GLC) projects.
• Experience in cloud migration, regulated industries, security audits or ISO 27001 implementation.