Service Delivery Lead - L3 AWS Cloud

Responsibilities: Multi-Cloud Infrastructure Operations • Operate, maintain, and continuously improve cloud-native production environments across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). • Provide hands-on technical leadership across a broad range of cloud services, including but not limited to: • AWS: Lambda, ECS/EKS, FSx, Glue, SES, GuardDuty, WAF, Shield Advanced, Security Hub, KMS, Secrets Manager, SNS, SQS, EventBridge, API Gateway, EC2, S3, CloudWatch, Systems Manager • Azure: Virtual Machines, Azure Kubernetes Service (AKS), Azure Functions, Azure Storage, Azure Monitor • GCP: Compute Engine, Google Kubernetes Engine (GKE), Cloud Functions, Cloud Storage, Cloud Monitoring • Monitor, analyze, and troubleshoot infrastructure performance, availability, scalability, and cost efficiency across all cloud platforms. • Support both production and staging environments, ensuring adherence to 24/7 high-availability and reliability objectives, including strict SLA and SLO commitments . • Participate in a 24/7 shift rotation to provide round-the-clock operational coverage. • Provide hands-on technical support and guidance to L2 engineers , leading incident response, root-cause analysis, and resolution of complex infrastructure and application issues. Operating System Lifecycle & Patch Management • Lead and oversee operating system patching and lifecycle management across RHEL (v8–v10) and Windows Server (2016–2025) environments using tools such as AWS Systems Manager Patch Manager, Azure Update Management, WSUS, SCCM, and YUM/DNF. • Maintain strong foundational knowledge of Linux system administration, complemented by deep expertise in Windows (Wintel) operating system patching, hardening, and lifecycle management. • Plan, schedule, automate, and track patch deployments across development, staging, and production environments, ensuring consistency and repeatability. • Coordinate patch approvals with security, compliance, and business stakeholders to ensure alignment with organizational policies, risk frameworks, and audit requirements. • Execute monthly and quarterly patching cycles with minimal service disruption, adhering to defined change management and maintenance windows. • Perform post-patch validation , health checks, and remediation activities to confirm system stability, security posture, and operational readiness. Application Deployment & Troubleshooting • Deploy, operate, and troubleshoot applications across Windows and Linux operating systems in cloud-based and hybrid environments. • Provide OS-level diagnostics, performance tuning, and stability support to application teams, including CPU, memory, disk, network, and process-level analysis. • Partner closely with development and DevOps teams to identify, isolate, and resolve infrastructure-, platform-, and OS-related application issues throughout the application lifecycle. • Implement, maintain, and continuously enhance application monitoring, logging, and alerting frameworks to ensure early issue detection and rapid incident response in production environments. Security & Compliance • Execute and manage CIS (Center for Internet Security) control implementations and remediations across multi-cloud environments to strengthen security posture. • Perform security hardening in accordance with CIS Benchmarks , industry best practices, and government-mandated security baselines . • Conduct continuous vulnerability identification, assessment, and remediation using tools such as Trend Micro Vision One , Qualys , Tenable , and AWS Config , ensuring timely risk mitigation. • Track, manage, and renew SSL/TLS certificates across all environments to prevent service disruptions and maintain secure communications. • Proactively identify and remediate End-of-Life (EOL) and End-of-Support (EOS) components, including operating systems, middleware, and AWS Lambda runtimes , to reduce security and compliance risks. • Support and maintain compliance with government-grade security, audit, and regulatory requirements , including evidence collection, audit readiness, and remediation tracking. Container & DevSecOps • Demonstrate strong working knowledge of container and orchestration technologies , including Docker , Kubernetes , and managed container platforms such as AWS ECS/EKS , Azure AKS , and Google GKE . • Apply familiarity with DevSecOps principles and practices, including exposure to SHIP-HATS (Secure Hybrid Integration Pipeline – Hive Agile Testing Solutions) within the Singapore Government technology ecosystem. • Support and maintain CI/CD pipeline operations , ensuring seamless integration with security scanning, vulnerability assessment, and compliance validation tools across the software delivery lifecycle. ITIL & Service Management • Adhere to ITIL-based service management processes, including Incident, Problem, Change, and Request Management, ensuring consistent and controlled service delivery. • Manage, prioritize, and resolve ITSM tickets using platforms such as ServiceNow , Jira , or equivalent tools, meeting defined service commitments and response targets. • Drive timely and effective ticket escalation and coordination between engineering teams, service owners, and stakeholders to ensure prompt issue resolution. • Coordinate and govern change management activities , including preparing change documentation and participating in Change Advisory Board (CAB) reviews, providing guidance and oversight to junior engineers. • Monitor, maintain, and report against Service Level Agreements (SLAs) and Operational Level Agreements (OLAs) to ensure service performance, accountability, and continuous improvement. Documentation & Knowledge Management • Create, maintain, and continuously update comprehensive infrastructure runbooks, system documentation, architecture design artefacts, and change-tracking logs for assigned applications and platforms. • Develop and standardize…