DevSecOps Engineer, Secure Cloud Infrastructure | Contract

Your tasks

Job Responsibilities

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production environments
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Build security into the development process by integrating SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates
• Set up and maintain monitoring, alerting and observability using tools such as Dynatrace or Datadog
• Support production deployments and incident resolution, including writing and maintaining runbooks
• Design, implement and regularly test backup and restore procedures
• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM)
• Senior Consultant: define the secured infrastructure architecture and security baseline for the platform
• Senior Consultant: set up and govern secure infrastructure standards, guardrails and practices across the team
• Senior Consultant: provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices
• Senior Consultant: work with agency security teams on security reviews, compliance requirements and remediation of findings

Requirements

Job Requirements

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Terraform (or equivalent) for Infrastructure as Code
• Hands-on experience with Docker and Kubernetes (EKS)
• Hands-on experience setting up CI/CD
• Hands-on experience with application and infrastructure security practices
• Hands-on experience with security scanning tools
• Hands-on experience with at least one observability tool, e.g. Dynatrace or Datadog
• Hands-on experience in production operations
• Experience with Singapore Government or public sector security and compliance requirements is an advantage
• Good to have: familiarity with building, containerising and deploying applications in Golang, Kotlin and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Good to have: identity tooling such as ADFS, WOG AD, SAML, OIDC and CAM (GovTech Central Accounts Management)
• Good to have: Trend Micro FAM and other infrastructure/container security tooling
• Good to have: OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
• Security-first mindset with a practical, delivery-focused approach

Other

Nexbridge Recruitment Pte Ltd EA License No: 26C3616 EA Personnel: Ching Ning Xin Registration No: R22108651