Senior/Staff Software Engineer, Platform Engineering - TradeNet

About the role

GovTech is recruiting a Senior or Staff Software Engineer for its Platform Engineering team within TradeNet, Singapore's National Single Window for trade permit processing. The platform underpins all TradeNet product development and focuses on resilience, security compliance, observability and developer efficiency at scale. The role works horizontally across product squads, delivering core infrastructure, standardised tooling, reliable runtime environments, automated deployment guardrails and operational visibility.

Key responsibilities

• Design and evolve a resilient, hub-and-spoke multi-cluster Kubernetes infrastructure on AWS, optimising for zero downtime, multi-region failover, cost efficiency and performance.
• Drive the implementation of Istio Ambient mesh, mTLS and fine-grained authorization policies.
• Establish observability, logging, metrics and alerting, and take part in incident response and blameless post-mortems.
• Enable product teams with self-service tenant onboarding and infrastructure management using modular Terraform/OpenTofu code and reference architectures.
• Standardise GitOps with ArgoCD/Rollouts and modern CI/CD pipelines so squads deploy independently within guardrails.
• Lead platform security assessments and penetration test remediations, and integrate SIEM logging, PAM and egress controls.
• Author Architecture Decision Records and technical RFCs, run architecture reviews and ensure compliance readiness (audit evidence, CSA/CSG/IM8 accreditation).
• Mentor senior and mid-level engineers and set TradeNet-wide engineering standards, including code quality, AI-assisted development workflows and testing.

Required profile

• At least 8 years (Senior) or 12 years (Staff) of software or platform engineering experience.
• 3+ years architecting and operating mission-critical production Kubernetes platforms on AWS used by multiple teams.
• Proven production experience with Istio and IaC with Terraform, including reusable module libraries.
• Deep AWS knowledge (multi-account landing zones, VPC, Transit Gateway, egress filtering, container orchestration, PostgreSQL/Aurora) and GitOps, SIEM integration and security remediation.
• Ability to set technical standards, write documentation and runbooks, and build consensus across teams.

Required skills

• Kubernetes on AWS
• Istio (Ambient or sidecar)
• Terraform and OpenTofu
• ArgoCD, Rollouts, CI/CD pipelines
• SIGMA, SIEM, PAM

Good to have: HashiCorp Vault, the Singapore government technology ecosystem (GovTech, SGTS, IM8/CSA), AI-assisted development workflows, legacy modernisation experience, and open-source infrastructure contributions.