Job Description

About the Role

We are seeking an experienced Senior DevSecOps Engineer to lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices in an enterprise environment. This role requires strong expertise across cloud infrastructure, security engineering, CI/CD automation, platform operations, and cloud governance.

Key Responsibilities

Cloud Infrastructure & Platform Engineering

Build and manage AWS cloud infrastructure using Terraform or equivalent Infrastructure-as-Code tools.
Provision and maintain Amazon VPC, Amazon EKS/ECS, RDS, and container registries.
Manage development, staging, and production environments.

DevSecOps & CI/CD

Implement secure CI/CD pipelines using GitLab.
Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and Infrastructure-as-Code scanning.
Establish quality and security gates within deployment pipelines.

Security Engineering

Implement and enforce least-privilege IAM, EKS Pod Identity, network segmentation, container hardening, system hardening, mutual TLS (mTLS), secrets management, and encryption at rest and in transit.
Develop and maintain security baselines and infrastructure standards.

Monitoring & Operations

Configure observability, monitoring, logging, and alerting.
Utilize monitoring platforms such as Dynatrace and Datadog.
Support production deployments and incident response activities.
Create and maintain operational runbooks.
Implement and validate backup and disaster recovery procedures.

Identity & Access Management

Integrate enterprise authentication and authorization solutions including ADFS, Active Directory, SAML, OIDC, and centralized account management systems.

Leadership & Governance

Define cloud platform security architecture and standards.
Conduct security reviews and vulnerability remediation activities.
Collaborate with stakeholders on security and compliance requirements.
Mentor engineering teams on DevSecOps best practices and promote a security-first engineering culture.

Mandatory Requirements

Experience

Consultant: 3-5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
Senior Consultant: 7+ years of experience, including at least 2-3 years defining secure cloud architecture or leading DevSecOps implementation.
Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Technical Skills

Strong hands-on experience with AWS Cloud Infrastructure.
Experience with Terraform or equivalent Infrastructure-as-Code technologies.
Experience with Docker, Kubernetes, and Amazon EKS.
Experience implementing CI/CD pipelines and deployment automation.
Experience in infrastructure security, application security, and secure-by-design practices.
Experience supporting production environments, monitoring, and incident management.

Preferred Skills

Experience with Dynatrace and Datadog.
Experience supporting or deploying applications built with Golang, Kotlin, Next.js, TypeScript, or Temporal on Kubernetes.
Knowledge of ADFS, Active Directory, SAML, and OIDC.
Exposure to Trend Micro FAM, OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA), Sitefinity, and Oracle technologies.