The posting
DevSecOps Engineer (Senior Consultant)
Job Overview
We are seeking an experienced DevSecOps Engineer (Senior Consultant) to support a major Singapore public sector digital modernization initiative.
In this role, you will be responsible for designing, implementing and maintaining secure, scalable and cloud-native infrastructure on Amazon Web Services (AWS). You will play a key role in integrating security throughout the software development lifecycle, establishing infrastructure security standards and ensuring the reliability and resilience of production environments.
The successful candidate will bring strong hands-on expertise in cloud infrastructure, Infrastructure as Code (IaC), containerization, CI/CD automation and cloud security, together with the ability to provide technical leadership and guidance to engineering teams.
Key Responsibilities
1. Cloud Infrastructure & Architecture
- Design, build and maintain secure, scalable and cloud-native infrastructure on AWS across development, staging and production environments.
- Implement Infrastructure as Code (IaC) solutions using Terraform or equivalent technologies.
- Configure and manage AWS services, including VPC networking, Amazon EKS/ECS, RDS and container registries.
- Define and establish secure infrastructure architecture, technical standards and security baselines.
2. DevSecOps & Cloud Security
- Embed security controls throughout the software development lifecycle and CI/CD pipelines.
- Implement security practices covering identity and access management, least-privilege IAM, network isolation, container hardening, secrets management, mTLS and data encryption.
- Integrate automated security scanning tools, including SAST, dependency, secret, container image and IaC scanning, into GitLab CI/CD pipelines.
- Establish security guardrails, infrastructure standards and governance practices to ensure consistent security compliance.
3. Platform Operations & Observability
- Implement and maintain monitoring, logging, alerting and observability solutions using tools such as Dynatrace or Datadog.
- Support production deployments, troubleshoot infrastructure issues and resolve operational incidents.
- Develop and maintain operational documentation, technical runbooks and incident response procedures.
- Design, implement and periodically test backup, recovery and restoration procedures.
4. Identity Management & Compliance
- Integrate cloud infrastructure with enterprise identity and access management solutions, including ADFS, WOG Active Directory, SAML, OIDC and GovTech Central Accounts Management (CAM).
- Collaborate with agency security teams to conduct security assessments, address compliance requirements and remediate identified vulnerabilities.
- Ensure infrastructure and application environments adhere to established security policies and technical standards.
5. Technical Leadership
- Provide technical guidance and mentorship to engineering teams on secure cloud infrastructure and DevSecOps implementation.
- Influence engineering practices and promote security-by-design principles across development and operations teams.
- Evaluate technical solutions, communicate security risks and recommend appropriate mitigation strategies to stakeholders.
Requirements & Qualifications
Professional Experience
- Minimum 7 years of relevant hands-on experience in DevOps, Cloud Infrastructure, Cloud Engineering or DevSecOps.
- At least 2–3 years of experience in defining secure cloud architecture, establishing infrastructure security standards or leading DevSecOps implementations.
- Demonstrated experience designing, deploying and managing production-grade AWS infrastructure.
- Experience working with Singapore Government or public sector security frameworks and compliance requirements will be an advantage.
Technical Competencies – Essential
- Cloud Platform: Strong hands-on experience with AWS infrastructure and cloud services.
- Infrastructure as Code: Proficiency in Terraform or equivalent IaC technologies.
- Containerisation: Hands-on experience with Docker and Kubernetes, particularly Amazon EKS.
- CI/CD Automation: Experience designing, implementing and maintaining CI/CD pipelines, preferably using GitLab CI/CD.
- Cloud & Application Security: Strong understanding of infrastructure security, application security, identity management and secure deployment practices.
- Security Scanning: Practical experience implementing automated security scanning tools across application code, dependencies, secrets, containers and infrastructure configurations.
- Monitoring & Observability: Experience with at least one monitoring and observability platform.
- Production Operations: Experience supporting live production environments, incident management and operational troubleshooting.
Technical Competencies – Advantageous
- Familiarity with observability platforms such as Dynatrace and Datadog.
- Experience with ADFS, WOG Active Directory, SAML, OIDC and GovTech Central Accounts Management (CAM).
- Exposure to Trend Micro FAM and other infrastructure or container security solutions.
- Familiarity with developing, containerising and deploying applications using Golang, Kotlin and Next.js/TypeScript.
- Experience operating workflow engines such as Temporal on Kubernetes.
- Exposure to OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA) and Sitefinity.
Key Attributes
- Strong security-first mindset with a pragmatic and delivery-oriented approach.
- Excellent analytical, troubleshooting and problem-solving capabilities.
- Strong communication and technical documentation skills.
- Ability to influence engineering teams and communicate complex technical concepts and security trade-offs to stakeholders.
- Comfortable working collaboratively with multidisciplinary engineering, infrastructure and security teams.
Interested candidates are invited to submit their applications with an updated CV outlining their relevant cloud infrastructure, DevSecOps and AWS experience. Thank you.
