Platform Operations Engineer

Job Description – Cyber Cloud platform Security Engineer Job Role Skill Level Required Platform Operations Engineer Associate Consultant / Consultant / Senior Consultant Primary Focus Cybersecurity go-live readiness, cloud security posture management, AWS / Azure security technical support, access administration and compliance governance Environment Coverage GCC / GCC+ and other Board hosting environments as assigned

1. Scope of Work The Cyber Operations Engineer will support the Board's day-to-day cloud cybersecurity operations, with a primary focus on system go-live readiness, CSPM and CloudSCAPE finding assessment, AWS / Azure security configuration support, controlled cloud access administration, compliance assessments and remediation coordination. The engineer will validate finding applicability and accuracy, recommend corrective actions, maintain auditable registers and provide technical analysis to PUB Cybersecurity. The role works with System Owners, System OICs, infrastructure teams, application vendors, GovTech and service providers to resolve configuration and compliance issues. Cybersecurity alert monitoring, triage, investigation, response and followup are excluded from this role. The role is intended to provide hands-on operational support. It does not replace the accountability of System Owners, System OICs, infrastructure teams, application vendors, or cybersecurity approving authorities. Risk acceptance and final cybersecurity clearance remain with the relevant approving authority.

2. Roles and Responsibilities

2.1 System Go-Live Cybersecurity Readiness and Clearance Support • Maintain and monitor the Cybersecurity Go-Live tracker for new systems, tech refresh and migrations, including ownership, outstanding evidence, target go-live date and closure status. • Perform first-level completeness checks of go-live artefacts before submission to the Board's Cybersecurity team. Artefacts may include the BIA, Risk Assessment, final system architecture, IT asset inventory, hardening evidence, VA/PT/SCR reports where applicable, System Security Plan, security logging and monitoring onboarding, backup/DR evidence, and cloud security monitoring evidence. • Check that cybersecurity assessment reports and supporting evidence are the latest submitted versions and clearly identify unresolved findings, deviations or risk-treatment items requiring further review. • Coordinate with System OICs, infrastructure teams, application vendors and IT Security Officers to close outstanding go-live prerequisites and maintain evidence of follow-up. • Track pre-go-live and post-go-live actions and verify that temporary access, troubleshooting rules and elevated privileges identified for removal or downgrade are followed up. • Prepare a consolidated readiness status for PUB Cybersecurity review and escalate blockers or overdue items that may affect planned go-live.

2.2 Azure / Cloud Access and RBAC Administration • Process approved cloud access and role-assignment requests in accordance with the Board's accesscontrol process and applicable segregation-of-duties requirements. Cyber Cloud Platform Security Engineer Job Description • Support assignment, modification and removal of approved Azure role-based access control (RBAC) permissions and relevant cybersecurity administration groups, based on authorised Service Requests or approvals. • Maintain auditable records of access assignments, changes, removals and supporting approvals. • Perform periodic checks and go-live/post-go-live follow-up for temporary or elevated cloud access, including removal or downgrade when no longer required. • Escalate unclear, excessive, conflicting or unsupported access requests to PUB Cybersecurity before implementation. • Support user access administration activities where assigned, while observing segregation of duties between request, approval and access administration.

2.3 CSPM, CloudSCAPE and Cloud Security Compliance Operations • Monitor and review Cloud Security Posture Management (CSPM) and CloudSCAPE findings from applicable platforms, including Microsoft Defender for Cloud / Azure CSPM, AWS Security Hub and GovTech CloudSCAPE. This responsibility covers security posture and compliance findings, not cybersecurity alerts. • Categorise and prioritise findings using the Board's approved prioritisation criteria, including severity, Internet exposure and applicable compliance requirements. • Identify appropriate remediation actions and coordinate with System OICs, application teams and cloud infrastructure teams to implement corrective measures. Track responses, remediation progress and outstanding actions in the central findings and compliance register. • Assess security misconfigurations, compliance deviations and potential vulnerabilities. Validate each finding's applicability and accuracy against the affected resource, configuration and available evidence, including identifying and documenting false positives for PUB Cybersecurity review. • Maintain records of outstanding findings, technical justifications, false-positive assessments, risk treatment, approved deviations, exception expiry dates, remediation status and documented closure evidence. Validate remediation evidence before recommending closure for review. • Escalate overdue, recurring, high-risk or disputed findings to PUB Cybersecurity for assessment and direction. • Prepare recurring cloud security posture and compliance updates, highlighting critical findings, overdue remediation, recurring misconfigurations and items requiring management direction.

2.4 Cloud Security Technical Support • Provide technical support on AWS and Azure security configurations, including assessment of configuration issues identified through CSPM, CloudSCAPE findings, compliance reviews and technical support requests. Cybersecurity alert monitoring, investigation and follow-up are outside this role's scope. • Review identity and access management, privileged access, network security, encryption and cloud resource configurations to identify misconfigurations and recommend corrective actions. • Investigate cloud security configuration issues, assess the technical context and dependencies, and recommend corrective actions to the responsible infrastructure or application team. Obtain PUB Cybersecurity direction where the proposed resolution involves a security exception or risk decision. • Coordinate with cloud infrastructure teams, service providers and application vendors to resolve securityrelated configuration issues, clarify remediation requirements and validate supporting evidence. Any production configuration changes remain subject to the Board's approved change-management and authorisation processes. • Support configuration review and technical validation of cloud resources against applicable security requirements, documenting the issue, recommended resolution, responsible team and outcome.

Cyber Cloud Platform Security Engineer Job Description

2.5 Security Compliance and Governance • Support compliance assessments against applicable government cybersecurity policies, security specifications and System Security Plans. Identify non-compliant cloud configurations, document the relevant requirement and recommend corrective measures. • Assist with the collection and validation of remediation evidence, checking that it addresses the identified configuration or compliance gap and recording any remaining issues requiring further review. • Support risk assessments for findings that cannot be immediately remediated by documenting the affected resources, technical context, remediation constraints, proposed interim measures and outstanding exposure for review by PUB Cybersecurity and the relevant approving authority. • Maintain accurate records of owners, due dates, technical justifications, risk-acceptance references, approved exceptions and closure evidence. Provide supporting evidence for cybersecurity assessments, internal reviews and audits when requested. • Maintain and update relevant SOPs, checklists and knowledge-base documentation. Identify recurring operational issues suitable for process improvement or automation and submit recommendations to PUB Cybersecurity.

2.6 Cybersecurity Operations Reporting • Prepare regular cybersecurity posture status reports covering go-live readiness, cloud security findings, compliance deviations, access-administration activities and remediation progress. • Maintain accurate findings and remediation registers, including affected resources, finding applicability, technical justifications, responsible owners, target dates, remediation status and closure evidence. • Highlight critical findings, overdue remediation, recurring security configuration issues and unresolved exceptions requiring management attention. • Provide technical analysis and recommendations to PUB Cybersecurity management, distinguishing confirmed issues, findings awaiting validation and items requiring risk assessment or approval.

2.7 Stakeholder Coordination and Technical Advisory • Work closely with System Owners, System OICs, application teams, cloud infrastructure teams, GovTech, service providers and external vendors on assigned cloud security posture and compliance matters. • Provide technical guidance on vulnerability remediation and AWS / Azure security configuration, clarifying the affected resource, corrective action and evidence required to demonstrate remediation. • Participate in technical discussions and security review meetings to resolve finding applicability • Escalate significant security risks, unresolved compliance issues and disputed or overdue remediation to PUB Cybersecurity for assessment and direction. Advisory support does not confer authority to accept risk or approve exceptions. • Implement any security initiatives that are required by the PUB Cybersecurity team. 

3. Deliverables • Updated cybersecurity go-live tracker and readiness status for assigned systems. • Completed first-level evidence/completeness review and documented outstanding-item list for each assigned go-live. • Cloud access / RBAC administration records with traceable approval or Service Request references. • CSPM / CloudSCAPE findings register, including applicability validation, false-positive justifications, prioritised remediation actions, owners, due dates, remediation status and validated closure evidence. Cyber Cloud Platform Security Engineer Job Description • Regular cybersecurity posture status reports covering critical findings, overdue remediation, recurring configuration issues, compliance deviations, escalations and technical recommendations for management review. • Documented AWS / Azure security configuration reviews, technical recommendations, compliance assessment support, remediation evidence checks and risk-assessment inputs, together with updated Cyber Operations SOPs, checklists, knowledge articles, dashboards and trackers as required.