Kerja Sepenuh Masa, Manager Of Cloud Services IT Infrastructure And Operations di BW Group - Maukerja

About BW Group

BW Group is a leading global energy and maritime company involved in shipping, deepwater oil & gas production, renewable energy and digital infrastructure. BW controls a fleet of over 400 vessels transporting oil, gas and dry commodities. In the infrastructure space, the group operates in wind, batteries, water, subsea cable networks and data centres.

BW is proud to be listed among Forbes World's Best Employers and Financial Times Best Employers Asia-Pacific 2025.

Are you ready to make an impact?

What drives us is our mission to deliver energy for the world today, and to find solutions for tomorrow. If you want to make lives better around the world by providing access to energy, while working on sustainability and decarbonisation, we'd like to hear from you. Working at BW you will feel the pulse of the world each day. If something happens in the world, we feel it, and you can play your part by anticipating and responding to it. Our high-performing teams are drawn to BW by the global nature of our work and the satisfaction of working with collaborative people who inspire each other to deliver exceptional results.

The Manager of Cloud Services is responsible for helping define and govern the Cloud architecture and M365 Environment for BW, ensuring cloud platforms and Microsoft Services are designed, implemented, and evolved in alignment with industry best practice e.g. Microsoft Azure Well Architected Framework.

This role provides architectural leadership across Azure platform, M365, networking, identity, and security, and is accountable for evaluating, designing, and recommending Azure security capabilities to ensure solutions are secure, resilient, scalable, and cost effective across enterprise workloads.

• This is a "hands on" delivery role covering management, consultancy, architecture, design and implementation capabilities.

Architecture/Design, Implementation and Consultancy

• Define and maintain the end-to-end Cloud and M365 architecture for BW, covering:
  • Compute, storage, platform services, microservices.
  • Identity and access management.
  • Networking and connectivity.
  • Hybrid and SaaS integrations.
  • Azure reference architectures, landing zones, and design patterns.
  • Architecture decision documentation.
  • AI capabilities and integrations.
  • DevOps CI/CD pipelines.
• Ensure all designs align with the Azure Well Architected Framework, including:
  • Security; Reliability; Performance Efficiency; Cost Optimization; Operational Excellence; Logging, monitoring, reporting and security telemetry.
• Act as a design authority for Cloud architecture decisions and standards.
• Work with BW Businesses to design and deploy solutions in Azure.
• Evaluate Azure application requests for security alignment, technology and security risks and control gaps.
• Implement or manage outsource implementation of changes.
• Vendor and technology partner management, including contracts and negotiation.
• Work with BW business to structure DevOps in a safe and secure manner while delivering agility.
• Use AI, Automation and IaC for solution delivery.
• Support security risk assessments and remediation.

Operations and Governance

• Manage support partners for delivery of services, service reviews and governance of SLA's.
• Provide high-priority operational support, problem determination, incident management and escalate to vendors/management accordingly.
• Manage CNAPP solution, evaluation and remediation of alerts.
• Work on cyber exposure and vulnerability management in Cloud and M365.

• 6+ years of hands-on experience in Azure and M365 Solution Architecture, design and implementation role.
• 10+ years total experience in infrastructure, cloud, or platform engineering.
• Proven experience designing enterprise-scale Azure environments.
• Strong expertise in:
  • Azure networking (VNets, peering, routing, private endpoints, WAF, Firewalls).
  • Azure identity (Entra, PIM), privilege, access models, roles, conditional access.
  • Azure compute, storage, and PaaS services.
  • Hub & Spoke, landing zone architectures.
  • App Registrations, Enterprise Apps, Graph API permissions.
  • Multi-Tenant and Cross Tenant capabilities.
  • Exchange/O365 Admin
  • SharePoint/Onedrive (Provisioning, permission models, information architecture)
  • Purview, Defender, Security benchmarks (e.g. CIS), Conditional access.
• Working knowledge of Azure security architecture.
• Demonstrated experience applying the Azure Well Architected Framework.
• Depth of knowledge in Hybrid AD/Entra environments.
• Strong documentation, design, and stakeholder engagement skills.
• Consultancy experience translating business requirements to architecture decisions and technical solutions.
• Experience working with Azure security functions:
  • Azure Landing Zones and enterprise subscription design.
  • Identity first and Zero Trust Design Principles.
  • Network segmentation and secure connectivity.
  • Logging, monitoring, and security telemetry integration.
  • Secure by design for hybrid, SaaS, and cloud native workloads
  • Separation of duties, least privilege, defense in depth, ZTNA.
• Architecture of Tenant design and for Multi-tenant Enterprise solutions.
• Cost optimization and resource planning.
• Availability, resiliency and DR/BCP development.
• AI Vision for solutioning and delivery.
• License management.
• PowerShell / Graph API scripting for automation.
• Comfortable presenting to an audience the architectural approach, discussing options, maintaining a standard approach and non-negotiables.

• Supporting skills:

  • Knowledge in Firewalls; Microsoft 365 Security; Virtualization security; System security both Linux and Windows; Endpoint Security; IPS/IDS; Cloud Security.
  • CrowdStrike, Zscaler, Next-Gen Firewalls, WAF.
  • Experience working with NIST CSF, MITRE ATT&CK Framework, STRIDE Treat Model.
  • Use of GitHub, Azure DevOps or similar.
  • Experience with OCI.
  • Azure Tenant migrations and connectivity.
  • Networking and dynamic routing experience.
  • AI - Co-Pilot and other AI integrations, MCP, AI Gateway, Agent365, AI Governance, AI Controls.
  • Certifications:
    • AZ 305 - Azure Solutions Architect Expert
    • AZ 700 - Designing and Implementing Microsoft Azure Networking Solutions
    • SC-100 - Cybersecurity Architect Expert
    • SC-300 - Identity and Access Administrator
    • MS-102 - M365 Administrator
• Experience working under ITIL
• Working knowledge of Trust Zone Segmentation and Zero Trust methodology.

At BW, we offer challenging work in an international environment with a team of dedicated and competent colleagues. We recognise that the success of BW rests with each employee's ability to provide the necessary skills and confidence within the team, and our training is tailored to suit individual needs and career aspirations.

Vision: Best on Water

Mission: We deliver energy for the world today, and find solutions for tomorrow

Values

• Collaborative
• Ambitious
• Reliable
• Enduring

If our values resonate with you and you think you can contribute, we would be delighted to hear from you!

Information for Recruitment Agencies:

BW endeavours to recruit and fill vacancies directly. However, when we do need to engage with agencies, BW operates a preferred supplier list (PSL) and will not be accepting unsolicited applications from non-PSL agencies for this role.