DevSecOps Engineer - AWS Cloud Security

About the role

A Singapore public sector modernisation project is looking for a DevSecOps engineer to design, build and operate secure, cloud-native, containerised infrastructure on AWS. The role blends infrastructure engineering, cloud security and secure software delivery, embedding security across infrastructure and the development lifecycle. It is a 2-year direct contract with the client, with an opportunity to renew or convert to permanent status, and is onsite.

Key responsibilities

• Set up cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production.
• Apply cloud security controls such as least-privilege IAM, EKS Pod Identity, network isolation, hardening, mTLS, secrets management and encryption at rest and in transit.
• Integrate SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines with defined pass/fail gates.
• Set up monitoring, alerting and observability with tools such as Dynatrace or Datadog, and support production deployments and incident resolution with runbooks.
• Design, implement and test backup and restore procedures, and integrate infrastructure with identity and access controls (ADFS, WOG AD, SAML, OIDC, CAM).
• Senior consultants also define the security architecture and baseline, set and govern infrastructure standards, mentor engineers, and work with agency security teams on reviews, compliance and remediation.

Required profile

• Consultant: 3-5 years of hands-on DevOps, cloud infrastructure or DevSecOps experience.
• Senior consultant: 7+ years, including at least 2-3 years defining secure cloud architecture or leading DevSecOps implementation.
• Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Required skills

• AWS hands-on setup of cloud infrastructure
• Terraform (or equivalent) for Infrastructure as Code
• Docker and Kubernetes (EKS)
• CI/CD pipeline setup
• Application and infrastructure security, and security scanning tools
• At least one observability tool
• Production operations
• Nice to have: Dynatrace or Datadog, Golang/Kotlin/Next.js/TypeScript, Temporal, ADFS/SAML/OIDC/CAM, Trend Micro FAM, OutSystems, OPA/OIA, Sitefinity, OracleEA