DevSecOps Engineer
Summary
DevSecOps Engineer to design, build, and operate secure, cloud-native containerized infrastructure on AWS (Terraform, VPC, EKS/ECS, RDS) for a Singapore public sector modernization project. Day-to-day combines IaC, cloud security (IAM, mTLS, secrets), SAST/image/IaC scanning in GitLab CI/CD, observability, and production support.
Salary: $7,000 – $10,000 per month
We are looking for DevSecOps Engineers to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a Singapore public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle.
Key Responsibilities:
Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments.
Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit.
Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates.
Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog.
Support production deployments and incident resolution, including writing and maintaining runbooks.
Design, implement, and regularly test backup and restore procedures.
Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM).
Requirements
Experience
Consultant: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation.
Experience with public sector security and compliance requirements is an advantage.
Technical skills (must have)
AWS: hands-on experience with setting up AWS cloud infrastructure
Infrastructure as Code: hands-on experience with Terraform (or equivalent)
Containers: hands-on experience with Docker, Kubernetes (EKS)
CI/CD: hands-on experience in setting up CI/CD
Security: hands-on experience with application and infra security practices
Security scanning tools: hands-on experience with security scanning tools
Observability: hands-on experience with at least one observability tool
Operations: hands-on experience in production operations
Shortlisted candidate will be reached out.