DevSecOps Engineer - AWS Cloud Security

About the role

A Singapore public sector modernisation project is looking for DevSecOps engineers to design, build and operate secure, cloud-native, containerised infrastructure on AWS. The role blends infrastructure engineering, cloud security and secure software delivery, embedding security across infrastructure and the development lifecycle.

Key responsibilities

• Set up cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production.
• Apply cloud security controls such as least-privilege IAM, EKS Pod Identity, network isolation, hardening, mTLS, secrets management and encryption at rest and in transit.
• Integrate SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines with defined pass/fail gates.
• Set up monitoring, alerting and observability with tools such as Dynatrace or Datadog.
• Support production deployments and incident resolution, including runbooks, and design, implement and test backup and restore procedures.
• Integrate infrastructure with identity and access controls (ADFS, WOG AD, SAML, OIDC, CAM).
• Senior Consultant: define the secured infrastructure architecture and security baseline, set and govern standards and guardrails, mentor engineers, and work with agency security teams on reviews, compliance and remediation.

Required profile

• Consultant: 3-5 years of hands-on DevOps, cloud infrastructure or DevSecOps experience.
• Senior Consultant: 7+ years, including at least 2-3 years defining secure cloud architecture or leading DevSecOps implementation.
• Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Required skills

• AWS hands-on setup; Terraform (or equivalent); Docker and Kubernetes (EKS)
• CI/CD setup; application and infrastructure security; security scanning tools
• At least one observability tool; production operations
• Good to have: Dynatrace, Datadog, ADFS, SAML, OIDC, CAM, Trend Micro FAM, OutSystems, OPA/OIA, Sitefinity, Golang, Kotlin, Next.js/TypeScript, Temporal