Company Introduction: We're home to Asia's most dynamic and vibrant capital markets.
Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.
HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."
Job Summary: We are seeking a highly motivated and experienced Principal Cloud Services Engineer to join Cloud Platform Services team. Our team responsible for designing, deploying, and maintaining cloud-based solution, we also work closely with our development, operations, and security teams to ensure the stability, scalability, and security of our cloud infrastructure.
Job Duties: Key Responsibilities: - Lead the design and evolution of global, Multi-AZ cloud architectures, focusing on resilience, scalability, and performance optimization.
- Infrastructure Governance, own and govern the "Golden Library" of Terraform modules, ensuring all infrastructure-as-code (IaC) follows strict organizational standards and naming conventions.
- AI-Driven Automation & Tooling: Design and build AI-Driven automation frameworks (Infrastructure as Intent) that streamline technical requirement analysis and accelerate the "Requirement-to-Code" lifecycle.
- Architect machine-readable schemas for complex cloud resources, including VPC CIDR allocation, DNS hierarchies, and global tagging taxonomies.
- Integrate CIS Cloud Foundations Benchmarks into the core delivery pipeline using Policy-as-Code tools to ensure 100% compliance at the point of creation.
- Implement automated validation loops that allow for self-healing infrastructure and proactive error correction within CI/CD pipelines.
Requirements: - 10+ years of experience in AWS, Azure, GCP or China Brand Private Cloud, with expert-level proficiency in Terraform (HCL) and the ability to build sophisticated, reusable module libraries.
- Deep knowledge of CIS Benchmarks and experience implementing Zero-Trust security models through automated Policy-as-Code (e.g., OPA, Sentinel, or Checkov).
- High proficiency in designing complex JSON/YAML schemas to create machine-parsable environments for automated CIDR allocation, tagging, and resource lifecycle management.
- Experience leveraging Large Language Models (LLMs) and AI coding assistants to accelerate development, with an understanding of how to provide technical context to AI agents for accurate code generation.
- Familiarity with building "closed-loop" automation where systems can interpret requirements, execute plans, and self-correct based on validation feedback.
- Advanced understanding of global networking, including transit routing, software-defined networking, and IP Address Management (IPAM) in a multi-region environment.
Competencies and Behaviors Required: Analytical Thinking
- Breaks down complex cloud infrastructure challenges into manageable components.
- Identifies root causes of system issues and proposes practical, data-driven solutions.
- Applies structured thinking to evaluate cloud architecture and deployment strategies.
Risk Awareness
- Understands and adheres to HKEX's risk appetite when implementing cloud solutions.
- Recognizes potential vulnerabilities in cloud environments and proactively mitigates them.
- Makes informed decisions that balance innovation with operational stability.
Intellectual Curiosity
- Actively explores emerging cloud technologies (e.g. AWS, Alibaba Cloud and China Brand Private Cloud).
- Seeks to understand the rationale behind new tools and practices such as Kubernetes, Terraform and CI/CD pipelines.
- Demonstrates a growth mindset by continuously learning and applying new knowledge.
Resilience
- Maintains composure and adaptability when troubleshooting critical cloud system issues.
- Manages multiple tasks and shifting priorities with focus and determination.
- Responds constructively to setbacks and uses them as learning opportunities.
Effective Communication
- Explains complex technical concepts clearly to non-technical stakeholders.
- Communicates status updates, blockers and risks in a timely and transparent manner.
- Collaborates effectively with cross-functional teams including development, operations and security.
Teamwork
- Works collaboratively with colleagues to deliver secure and scalable cloud solutions.
- Supports team members by sharing knowledge and offering assistance during project delivery.
- Builds positive relationships across departments to ensure alignment with HKEX standards.
HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.
Location: HKEX - TKO
Shift: Standard - 40 Hours (Hong Kong SAR)
Scheduled Weekly Hours: 40
Worker Type: Contract