Cloud Security Engineer

a) Review and enhance existing security policies and processes to address gaps and improve efficiency in strengthening the organisation's security posture

b) Conduct security risk assessments for cloud projects and lead/assist in implementing proposed cloud solutions, including proof of concept demonstrations

c) Design, build and maintain cloud infrastructure

d) Update cloud security policies regularly to maintain alignment with current threat landscape and best practices

e) Provide necessary support for audit and regulatory requirements, ensuring compliance across cloud infrastructure

f) Create comprehensive technical architecture diagrams that clearly illustrate security control deployment across cloud environments

g) Develop detailed reports explaining the risk-based rationale behind architectural decisions and recommended security controls

h) Prepare and submit thorough Security Design Documents for review and implementation

i) Offer technical guidance and consultation to application project teams regarding cloud security considerations and best practices

Qualifications

a) A comprehensive understanding of public sector security policies and industry best practices. The engineer should have participated in at least 3 public cloud projects, or be involved in a public cloud project for at least 12 months, with at least 2+ years of frontend and/or backend software engineering expirience in building scalable products on commercial cloud.

b) The expertise to recommend appropriate cloud solutions and architectures that bolster security in the cloud landscape. The engineer should minimally possess an AWS Certified Security, Azure Security Engineer Associate or Google Cloud Security Engineer certification.

c) Experience in application development, including solution design, CI/CD pipeline configurations, frontend and backend development and test automation.

d) Adept skillsets in modern web application technology stack e.g React.js, Spring, Fast API, Django, PostgreSQL

e) Experience with infrastructure provisioning tools e.g Terraform and Ansible