Job Responsibilities
Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production environments
Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
Build security into the development process by integrating SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates
Set up and maintain monitoring, alerting and observability using tools such as Dynatrace or Datadog
Support production deployments and incident resolution, including writing and maintaining runbooks
Design, implement and regularly test backup and restore procedures
Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM)
Senior Consultant: define the secured infrastructure architecture and security baseline for the platform
Senior Consultant: set up and govern secure infrastructure standards, guardrails and practices across the team
Senior Consultant: provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices
Senior Consultant: work with agency security teams on security reviews, compliance requirements and remediation of findings
Job Requirements
Hands-on experience setting up AWS cloud infrastructure
Hands-on experience with Terraform (or equivalent) for Infrastructure as Code
Hands-on experience with Docker and Kubernetes (EKS)
Hands-on experience setting up CI/CD
Hands-on experience with application and infrastructure security practices
Hands-on experience with security scanning tools
Hands-on experience with at least one observability tool, e.g. Dynatrace or Datadog
Hands-on experience in production operations
Experience with Singapore Government or public sector security and compliance requirements is an advantage
Good to have: familiarity with building, containerising and deploying applications in Golang, Kotlin and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
Good to have: identity tooling such as ADFS, WOG AD, SAML, OIDC and CAM (GovTech Central Accounts Management)
Good to have: Trend Micro FAM and other infrastructure/container security tooling
Good to have: OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
Security-first mindset with a practical, delivery-focused approach
Interested candidates are invited to apply via the “Apply Now” button.
We regret that only shortlisted candidates will be notified.
By submitting your personal data and CV, you consent to Nexbridge Recruitment Pte Ltd collecting, using and disclosing your personal data for recruitment purposes.
Nexbridge Recruitment Pte Ltd
EA License No: 26C3616
EA Personnel: Ching Ning Xin
Registration No: R22108651
Nexbridge Recruitment connects talented professionals with the right career opportunities. We partner with organisations across various sectors including IT, Finance, Healthcare, Engineering, and Retail, providing permanent, and executive hiring solutions.