DevOps Engineer (MVP – Deterministic Claims Rail)

About the role

You will be the primary DevOps engineer responsible for building, securing, automating, and operating the entire AWS environment for the MVP of the Singapore Claims Utility. You will work directly with the Enterprise Architect and the engineering vendor to ensure the platform is deterministic, reproducible, secure, and regulator ready. This role is hands-on - you will build pipelines, infrastructure, automation, and acceptance environments yourself.

Key responsibilities

• Design, deploy, and maintain all AWS components required for the deterministic MVP: VPC, subnets, routing, security groups, API Gateway (mTLS), Lambda execution environments, Step Functions orchestration, DynamoDB tables, S3 buckets, CloudWatch logs, metrics, alarms, KMS keys and encryption policies, IAM roles, policies, and VPC endpoints

• Build and maintain all automation pipelines required for deterministic execution: GitHub Actions pipelines, Terraform IaC modules, deterministic replay harness pipeline, evidence pack generation pipeline, nightly scenario matrix execution, dashboard deployment pipeline, and acceptance testing pipelines

• Implement automation for deterministic replay harness execution, evidence pack generation, concurrency test execution, offline parity validation, signed output packaging, and PHI free evidence pack delivery

• Enforce security and compliance: PDPA gateway rules, zero PHI boundary, encrypted logs, tamper evident ledger storage, secure secrets management, TLS/mTLS enforcement, IAM least-privilege access, and audit log completeness

• Prepare G0 - G1 acceptance environment, support vendor deployments, support EA in acceptance testing, run replay harness nightly, validate evidence pack correctness, ensure environment stability, and support regulator demonstrations

• Work closely with Enterprise Architect, vendor engineering team, QA, Product, and Security to ensure architecture, pipelines, and infrastructure align with EA decisions

About you

• Strong AWS experience (Lambda, API Gateway, DynamoDB, S3, CloudWatch, KMS)

• Expert-level Terraform

• Expert-level GitHub Actions

• IAM, PKI, TLS/mTLS experience

• Docker and Linux experience

• CI/CD automation experience

• Secrets management experience

• Monitoring and observability experience

• Distributed systems fundamentals

• Strong debugging skills (infrastructure and backend)

• Least-privilege IAM, encryption at rest and in transit, TLS/mTLS, secrets management, audit log integrity, zero trust principles, and zero PHI boundary enforcement

• Hands-on builder mindset

• Fast learner

• Strong communicator

• Comfortable working in regulated environments

• Disciplined and detail-oriented

• Deterministic replay pipelines, reproducible execution environments, evidence pack automation, concurrency testing, offline parity validation, or signed output packaging experience (or willing to learn)

• Step Functions experience, DynamoDB experience, Node.js/Python debugging, experience in regulated industries, or experience with deterministic systems (nice-to-have)