Senior Platform & Security Engineer – Data & AI Platform

About the role

The Digital Services & Technology Office at Ngee Ann Polytechnic is hiring a Senior Platform & Security Engineer for a 2-year contract. You will design, build, secure and operate the Enterprise Data & AI platform so that it is reliable, cost-efficient and compliant with enterprise governance standards, owning both the technical platform layer (clusters, jobs, CI/CD, monitoring) and the security layer (encryption, IAM, audit).

Key responsibilities

• Configure and maintain the Enterprise Data and AI platform (e.g. Databricks workspaces, clusters, SQL warehouses, endpoints and workflows)
• Automate provisioning and deployments with Terraform, Databricks CLI or APIs
• Design and govern CI/CD frameworks for Data Engineers' ETL/ML deployments
• Monitor platform usage and costs, optimise performance and meet uptime and service-level objectives
• Implement security controls including encryption, secrets management and secure access patterns
• Define role-based and attribute-based access policies and configure secret scopes and service principals
• Monitor audit and activity logs for policy violations and anomalous access, and align operations with NP's security, compliance and regulatory requirements (IM8, NIST, GDPR, PDPA where applicable)
• Work with Data Engineers, Governance Leads, Analysts and the CI/CD team, and advise leadership on performance, security posture and compliance gaps

Required profile

• 3-5 years in cloud platform engineering or security engineering
• Proven experience managing and securing large-scale data or ML platforms
• Degree or diploma in Computer Science, Computer Engineering, Information Technology or equivalent
• Prior work in regulated industries (finance, healthcare, government) is a plus
• Experience in GCC/GCC2.0 is a plus

Required skills

• Certifications: Azure Security Engineer Associate / AWS Security Specialty / GCP Security Engineer
• Terraform or equivalent infrastructure-as-code
• Databricks Certified Administrator or Databricks Security Engineer is a plus
• Cloud IAM, KMS, VPC/VNet, firewall/security groups, encryption standards (AES, envelope encryption)
• CI/CD tools such as Azure DevOps, GitHub Actions, Jenkins
• Databricks administration (clusters, jobs, SQL warehouses, UC integration)
• Monitoring/observability (e.g. Azure Monitor), incident response and audit log analysis