DevSecOps Engineer

We are looking for experienced DevSecOps Engineers to design, build, and manage secure, cloud-native infrastructure on AWS for aSingapore public sector modernisation project.The ideal candidates should havestrong hands-on experience in AWS, Terraform, Kubernetes, CI/CD pipelines, andcloud security.

Key Responsibilities:

. Design, build, and manage AWScloud infrastructure across development, staging, and production environments.

. Implement Infrastructure asCode (IaC) using Terraform.

. Manage containerisedenvironments using Docker and Kubernetes (EKS).

. Implement cloud securitypractices, including IAM, encryption, secrets management, and network security.

. Integrate security scanningtools into CI/CD pipelines.

. Set up monitoring, alerting,and observability.

. Support production deployments,troubleshooting, and incident resolution.

. Implement backup and recoveryprocedures.

. Ensure secure infrastructureand application delivery.

Additional Responsibilities (Senior Consultant):

. Define secure cloudinfrastructure architecture and security standards.

. Establish security guidelinesand best practices across engineering teams.

. Mentor engineers on DevSecOpsand cloud security practices.

. Coordinate with security teamson compliance, security reviews, and remediation.

Required Skills & Experience:

Consultant:

. 3-5 years of experience inDevOps, Cloud Infrastructure, or DevSecOps.

Senior Consultant:

. 7+ years of relevantexperience.

. At least 2-3 years ofexperience in secure cloud architecture or DevSecOps implementation.

Technical Skills (Must Have):

. Hands-on experience with AWScloud infrastructure.

. Strong experience withTerraform or equivalent IaC tools.

. Docker and Kubernetes (EKS).

. CI/CD pipeline implementation.

. Cloud and application securitypractices.

. Security scanning tools.

. Monitoring and observabilitytools.

. Production operationsexperience.

Good to Have:

. Dynatrace or Datadog.

. Golang, Kotlin, Next.js, andTypeScript.

. Temporal workflow engine onKubernetes.

. ADFS, SAML, OIDC, WOG AD, andCAM.

. Trend Micro and containersecurity tools.

. Experience with SingaporeGovernment or public sector security requirements.