IT Infrastructure & Security Engineer

About the role

Whalet is a cross-border payments company building its international headquarters in Singapore, as a Payment Service Provider regulated by the Monetary Authority of Singapore (MAS). It is setting up a local technology team to run and secure the infrastructure behind its payment services across Asia Pacific. The role is for a hands-on engineer with around five years of experience to run the Singapore cloud infrastructure and own its day-to-day security, working closely with the group technology team in China and with Compliance and Risk.

Key responsibilities

• Deploy, operate and improve the Singapore cloud environment (compute, network, databases, storage) for payment workloads, with high availability and performance
• Build monitoring, alerting, logging and capacity management, define and track service level objectives, and automate infrastructure and releases with Infrastructure-as-Code and CI/CD pipelines
• Apply change management, release review and rollback discipline to protect production
• Maintain security baselines, patching, endpoint protection/EDR and vulnerability scanning, coordinate penetration tests and track remediation
• Manage identity and access, including privileged access, least privilege and segregation of duties
• Operate SIEM and respond to security incidents, including regular exercises
• Implement technical controls aligned with MAS Technology Risk Management Guidelines and Notices, and with PDPA requirements
• Prepare security policies, procedures and evidence for internal audits, external audits and MAS inspections
• Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery tests
• Support incident escalation and regulatory incident reporting within MAS timelines
• Support due diligence and monitoring of cloud providers and vendors, and work with the China HQ and Compliance and Risk teams

Required profile

• Bachelor's degree in Computer Science, Information Technology, Information Security or a related field
• 4-6 years' experience in infrastructure, DevOps, SRE or security engineering, including running production systems
• Fluent English and Mandarin; willingness to participate in an on-call rotation
• Strongly preferred: experience supporting payment systems in production, prior experience at an MAS-licensed financial institution or payments company, and experience setting up infrastructure in an early-stage or fast-growing environment

Required skills

• AWS (or equivalent major cloud) and containerised workloads on Kubernetes
• Terraform, Ansible or similar IaC tools and CI/CD pipelines
• Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and relational databases and Redis
• Prometheus, Grafana or Datadog
• SIEM, EDR, vulnerability management and incident response
• Nice to have: AWS, CKA/CKS, Security+, CISSP, CISM or OSCC certifications