DevSecOps Engineer (AWS, Terraform, Kubernetes)

About the role

A consultancy is hiring DevSecOps Engineers to design, implement and maintain secure, cloud-native infrastructure on AWS. The role suits consultants with 3-5 years of experience, and senior consultants with 7+ years. Candidates should have strong experience in cloud infrastructure, containerisation, Infrastructure as Code (IaC), CI/CD automation and cloud security.

Key responsibilities

• Design, build and maintain AWS cloud infrastructure across development, staging and production environments.
• Implement Infrastructure as Code with Terraform or equivalent tools.
• Manage containerised environments with Docker and Kubernetes (EKS/ECS).
• Integrate security scanning tools into GitLab CI/CD pipelines.
• Apply cloud security practices such as IAM, network security, encryption, secrets management and system hardening.
• Set up monitoring, alerting and observability, and support production deployments, troubleshooting and incident resolution.
• Implement backup, recovery and disaster recovery procedures, and integrate infrastructure with identity and access management solutions.
• Maintain technical documentation and operational runbooks.
• Senior consultants also define secure cloud architecture and security baselines, set security standards and governance, mentor engineering teams and work with security teams on compliance reviews.

Required profile

• Experience as a consultant: 3-5 years; senior consultant: 7+ years.
• Strong security-first mindset, good problem-solving and troubleshooting skills, and clear communication and documentation skills.
• Ability to work with development, infrastructure and security teams; senior consultants need technical leadership, mentoring and stakeholder management skills.

Required skills

• AWS hands-on infrastructure setup and management.
• Terraform or equivalent IaC.
• Docker and Kubernetes (EKS).
• CI/CD pipeline design and maintenance.
• Cloud security: IAM, encryption, network security, infrastructure hardening.
• SAST, dependency, secrets, container image and IaC scanning tools.
• At least one monitoring and observability tool.
• Good to have: Dynatrace or Datadog, GitLab CI/CD, AD/SAML/OIDC identity management, Trend Micro tools, Golang, Kotlin, Next.js, TypeScript, Temporal, OutSystems, OPA/OIA, Sitefinity, and Singapore government or public sector project experience.