DevSecOps Engineer

We are looking for experienced DevSecOps Engineers to design, build, and manage secure, cloud-native infrastructure on AWS for aSingapore public sector modernisation project.The ideal candidates should havestrong hands-on experience in AWS, Terraform, Kubernetes, CI/CD pipelines, andcloud security.

Key Responsibilities:

• Design, build, and manage AWScloud infrastructure across development, staging, and production environments.
• Implement Infrastructure asCode (IaC) using Terraform.

• Manage containerisedenvironments using Docker and Kubernetes (EKS).
• Implement cloud securitypractices, including IAM, encryption, secrets management, and network security.

• Integrate security scanningtools into CI/CD pipelines.
• Set up monitoring, alerting,and observability.

• Support production deployments,troubleshooting, and incident resolution.
• Implement backup and recoveryprocedures.

• Ensure secure infrastructureand application delivery.

Additional Responsibilities (Senior Consultant):

• Define secure cloudinfrastructure architecture and security standards.
• Establish security guidelinesand best practices across engineering teams.

• Mentor engineers on DevSecOpsand cloud security practices.
• Coordinate with security teamson compliance, security reviews, and remediation.

Required Skills & Experience:

Consultant:

• 3–5 years of experience inDevOps, Cloud Infrastructure, or DevSecOps.

Senior Consultant:

• 7+ years of relevantexperience.
• At least 2–3 years ofexperience in secure cloud architecture or DevSecOps implementation.

Technical Skills (Must Have):

• Hands-on experience with AWScloud infrastructure.
• Strong experience withTerraform or equivalent IaC tools.

• Docker and Kubernetes (EKS).
• CI/CD pipeline implementation.

• Cloud and application securitypractices.
• Security scanning tools.

• Monitoring and observabilitytools.
• Production operationsexperience.

Good to Have:

• Dynatrace or Datadog.
• Golang, Kotlin, Next.js, andTypeScript.

• Temporal workflow engine onKubernetes.
• ADFS, SAML, OIDC, WOG AD, andCAM.

• Trend Micro and containersecurity tools.
• Experience with SingaporeGovernment or public sector security requirements.