Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Platform Operations Engineer (Public Sector)

Xtremax Pte. Ltd.

Where
Singapore
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPlatform Operations Engineer (Public Sector)Xtremax Pte. Ltd. · Singapore

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Xtremax Pte. Ltd.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 3 days ago

The posting

Overview

The Platform Operations Engineer will support a Singapore Government agency’s Amazon Web Services (AWS) environment hosted on the Government Commercial Cloud (GCC), managing the full lifecycle of cloud platform services across build, operate, and secure activities. The role covers cloud engineering and platform operations, Linux and Windows Server administration, Infrastructure-as-Code (IaC), DevSecOps, security compliance, and operational support to ensure the availability, reliability, security, and performance of cloud-hosted and agency-managed workloads.

The engineer will implement and maintain AWS platform services, support infrastructure provisioning and automation, perform system administration, monitoring, patching, incident and change management, and contribute to backup, recovery, and disaster recovery activities. All work must comply with applicable Singapore Government requirements and security frameworks, including IM8, the GCC Cloud Security & Governance Framework (CSGF), the Personal Data Protection Act (PDPA), and the Cybersecurity Act.

Scope of Work

Build & Engineering

  • Design, provision, and configure AWS resources across compute, storage, networking, identity, database, and managed services within the Agency's AWS environment, consistent with GCC-provided guardrails, hardened images, and approved security baselines.
  • Develop and maintain Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation and/or AWS CDK, with version control and peer review prior to deployment.
  • Support workload migrations, application onboarding, and environment refreshes across Development, Test, Staging and Production environments.
  • Configure and maintain CI/CD pipelines for infrastructure and application deployment, integrated with the Agency's approved DevSecOps toolchain.
  • Implement and maintain AWS networking including VPCs, subnets, route tables, Security Groups, NACLs, VPC endpoints, Transit Gateway and load balancers, where applicable.
  • Design, configure, and maintain Linux and Windows Server workloads on Amazon EC2, including OS hardening, domain integration, patching, certificate management, file services and related platform components.
  • Configure and support commonly used AWS services such as EC2, S3, RDS, ELB/ALB/NLB, Route 53, Lambda, ECS/EKS, Systems Manager and Secrets Manager, where required by the Agency.

Operate & Maintain

  • Perform day-to-day administration of the AWS environment including monitoring, patching, capacity management, cost optimisation, backup management and incident response.
  • Maintain system availability in line with agreed Service Level targets.
  • Monitor infrastructure and application health using Amazon CloudWatch, logs, metrics, dashboards and alerts.
  • Manage backup, disaster recovery and business continuity configurations using services such as AWS Backup, RDS snapshots and cross-region/cross-account recovery arrangements, where applicable.
  • Conduct periodic backup restoration and disaster recovery testing.
  • Maintain accurate configuration records, architecture diagrams, operational procedures and runbooks, ensuring documentation is updated following material changes.
  • Provide L2/L3 technical support and act as an escalation point for cloud infrastructure incidents, working within Agency-defined incident management procedures.
  • Support change management activities including impact assessment, implementation planning, rollback planning and Change Advisory Board (CAB) submissions where applicable.
  • Perform Linux and Windows Server administration including OS patching, system health checks, log reviews, capacity monitoring, service account coordination and troubleshooting.
  • Support operational automation using AWS Systems Manager, Lambda, EventBridge, Python, PowerShell, Bash or equivalent tools to reduce repetitive manual activities.

Secure & Comply

  • Implement and maintain security controls aligned to relevant IM8 requirements, including cloud security, data protection, identity and access management, network security, logging and security operations.
  • Operate within the GCC Cloud Security & Governance Framework (CSGF), including compliance with mandated GCC guardrails, secured administrative access and centrally provided security services.
  • Administer identity and access using the Agency's approved access model and AWS IAM, including IAM roles, policies and privileged access, enforcing least privilege and segregation of duties.
  • Implement and maintain security services such as AWS CloudTrail, AWS Config, Security Hub, GuardDuty, Inspector, KMS, Secrets Manager and WAF, where applicable.
  • Support continuous compliance monitoring, vulnerability management and remediation tracking, including timely closure of findings from GCC compliance scans, vulnerability assessments and penetration testing (VAPT).
  • Maintain appropriate logging and audit trails using CloudTrail, CloudWatch Logs and other Agency-mandated security monitoring platforms.
  • Ensure data classification, encryption at rest and in transit, key management and data residency requirements are implemented in accordance with IM8 and Agency requirements.
  • Support audit and assurance activities, including evidence gathering for internal audits, GovTech compliance reviews and external certification audits such as MTCS SS 584 and ISO 27001, where applicable.
  • Report and support investigation of security incidents in accordance with the Agency's Cyber Incident Response Plan and applicable Cybersecurity Act requirements.
  • Apply Linux and Windows Server security baselines, access controls, endpoint protection, audit logging, vulnerability remediation and patching requirements in accordance with Agency policy, IM8 and applicable GCC security requirements.

Requirements

Required Qualifications & Experience

  • Bachelor’s degree in Computer Science, Information Technology, or related field.
  • Minimum 3–5 years of hands-on experience administering AWS environments and Linux/Windows Server platforms in a production environment.
  • Strong hands-on experience with core AWS services including:
  • EC2
  • S3
  • RDS
  • VPC
  • IAM
  • ELB / ALB / NLB
  • Route 53
  • CloudWatch
  • CloudTrail
  • Systems Manager
  • AWS Backup
  • KMS
  • Secrets Manager
  • Demonstrated experience with Infrastructure-as-Code, preferably Terraform and/or AWS CloudFormation.
  • Strong understanding of AWS networking including VPCs, subnets, routing, Security Groups, NACLs, VPC endpoints and private connectivity.
  • Experience administering Linux and Windows Server, including OS hardening, patch management, Active Directory integration, certificate management, backup, monitoring and troubleshooting.
  • Experience with AWS security services such as Security Hub, GuardDuty, Inspector, AWS Config, CloudTrail, KMS and IAM.
  • Prior experience working within a regulated, government or highly governed enterprise cloud environment is strongly preferred.
  • Familiarity with Singapore Government GCC and IM8 requirements is an advantage.
  • Working knowledge of DevSecOps practices, CI/CD pipelines using GitLab CI/CD, AWS CodePipeline/CodeBuild or equivalent tools, and scripting using Python, PowerShell and/or Bash.
  • Experience supporting container platforms such as Amazon ECS and/or Amazon EKS is advantageous.
  • Experience with AWS managed and serverless services such as Lambda, EventBridge, API Gateway, DynamoDB and Step Functions is advantageous.

Relevant Certifications Preferred

  • AWS Certified Solutions Architect – Associate
  • AWS Certified SysOps Administrator – Associate
  • AWS Certified Developer – Associate
  • AWS Certified Solutions Architect – Professional
  • AWS Certified DevOps Engineer – Professional
  • AWS Certified Security – Specialty, or equivalent current AWS security certification

Benefits

By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment.

You also represent to us that you have obtained the consent of your referees when you disclose to us their personal data for the purpose of conducting reference checks.

The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here:

We regret to inform you that should you not consent to providing the necessary data required for us to process your application, your application will be considered void.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Xtremax Pte. Ltd.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Xtremax Pte. Ltd.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Xtremax Pte. Ltd.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.