DevSecOps Engineer (Consultant / Senior Consultant)
About the company
Our client is a technology services firm delivering a large-scale cloud modernisation programme for the Singapore public sector. They are seeking
Your tasks
DevSecOps Engineers at both Consultant and Senior Consultant levels to design, build, and operate secure, cloud-native infrastructure that underpins critical government services. This is a high-impact role at the intersection of cloud infrastructure engineering, security, and software delivery — embedding security practices throughout the development lifecycle. If you are motivated by meaningful public-sector work and thrive in environments where rigorous security and reliable delivery go hand in hand, this role offers excellent scope and responsibility.
_All levels:_
- Design and provision cloud-native, containerised infrastructure on AWS using Infrastructure as Code tools (e.g. Terraform), covering VPC networking, managed Kubernetes and container services, relational databases, and container registries across development, staging, and production environments
- Apply comprehensive cloud security controls, including least-privilege IAM policies, pod-level identity management, network isolation, system and container hardening, mutual TLS, secrets management, and encryption at rest and in transit
- Embed security into the software delivery process by integrating static analysis, dependency scanning, secret detection, container image scanning, and IaC scanning into CI/CD pipelines, with clearly defined quality gates
- Establish and maintain monitoring, alerting, and observability capabilities using industry-standard tooling to ensure platform health and rapid incident detection
- Support production deployments and incident response, including authoring and maintaining operational runbooks
- Design, implement, and periodically validate backup and disaster recovery procedures
- Integrate platform infrastructure with enterprise identity and access management systems using standard protocols such as SAML and OIDC
_Additional responsibilities at Senior Consultant level:_
- Define the overall secure infrastructure architecture and establish the security baseline for the platform
- Own and govern infrastructure standards, guardrails, and DevSecOps practices across the engineering team
- Mentor and guide engineers on secure infrastructure design and DevSecOps principles
- Collaborate with agency security stakeholders on compliance requirements, security reviews, and remediation of audit findings
Requirements
- Consultant level: Minimum 3 years of hands-on experience in DevOps, cloud infrastructure, or DevSecOps roles; Senior Consultant level: Minimum 7 years of relevant experience, including at least 2–3 years leading secure cloud architecture design or DevSecOps implementation
- Proven hands-on experience with AWS infrastructure provisioning, Infrastructure as Code (Terraform or equivalent), container orchestration using Kubernetes (EKS), and production-grade CI/CD pipeline setup
- Demonstrated experience applying application and infrastructure security practices, including the use of security scanning tools across code, dependencies, containers, and IaC
- Hands-on experience with production operations, including observability tooling, incident management, and runbook development
- Familiarity with observability platforms such as Dynatrace or Datadog (is a bonus)
- Experience with Singapore Government or public sector security and compliance frameworks (is a bonus); familiarity with identity integration (ADFS, SAML, OIDC) or container security tooling (is a bonus)
How to apply
If you are passionate about technology and meet the above requirements, please don't hesitate to apply. Please note that only shortlisted candidates will be contacted. Appreciate your understanding. Data provided is for recruitment purposes only.
Other
Business Registration Number: 201735941W