Company Overview
3 Cubed Business Consulting is headquartered in Singapore, providing IT consulting, solutions, and services across Asia Pacific. Since 2015, it delivers comprehensive end-to-end IT solutions, driven by customer purpose and passion.
Job Summary
Design, build, and operate secure, cloud-native, containerized infrastructure on AWS for a Singapore public sector modernization project, embedding security throughout infrastructure and development lifecycles.
Responsibilities
- Design and deploy cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform) across development, staging, and production environments
- Implement cloud security controls including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
- Integrate security into development pipelines by embedding SAST, dependency, secret, container image, and IaC scanning with pass/fail gates in GitLab CI/CD
- Configure and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog
- Support production deployments and resolve incidents by creating and updating runbooks
- Design, implement, and test backup and restore procedures regularly
- Integrate infrastructure with identity and access management systems including ADFS, WOG AD, SAML, OIDC, and CAM
- For Senior Consultant: Define secure infrastructure architecture and security baselines for the platform
- For Senior Consultant: Establish and govern secure infrastructure standards, guardrails, and best practices across teams
- For Senior Consultant: Mentor engineers on secure infrastructure and DevSecOps practices
- For Senior Consultant: Collaborate with agency security teams on security reviews, compliance, and remediation of findings
Required competencies and certifications
- Hands-on experience setting up AWS cloud infrastructure
- Hands-on experience with Infrastructure as Code tools such as Terraform
- Hands-on experience with container technologies including Docker and Kubernetes (EKS)
- Hands-on experience configuring CI/CD pipelines
- Hands-on experience applying application and infrastructure security practices
- Hands-on experience using security scanning tools
- Hands-on experience with observability tools (e.g., Dynatrace, Datadog)
- Hands-on experience in production operations
Preferred competencies and qualifications
- Experience with Singapore Government or public sector security and compliance requirements
- Familiarity with observability tools such as Dynatrace and Datadog
- Familiarity with building, containerizing, and deploying applications using Golang, Kotlin, Next.js/TypeScript
- Experience operating workflow engines such as Temporal on Kubernetes
- Knowledge of identity management systems including ADFS, WOG AD, SAML, OIDC, CAM
- Experience with Trend Micro FAM and other infrastructure/container security tools
- Familiarity with OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
Other Information
- Security-first mindset with a practical, delivery-focused approach
- Clear documentation and communication skills
- Senior Consultant: Ability to influence engineering teams and explain security trade-offs to stakeholders
- Employment Agency No.: 21S0778