Senior DevSecOps Engineer (AWS Cloud Security)

About the Role

We are seeking an experienced Senior DevSecOps Engineer to lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices in an enterprise environment. This role requires strong expertise across cloud infrastructure, security engineering, CI/CD automation, platform operations, and cloud governance.

Key Responsibilities

Cloud Infrastructure & Platform Engineering

• Build and manage AWS cloud infrastructure using Terraform or equivalent Infrastructure-as-Code tools.
• Provision and maintain Amazon VPC, Amazon EKS/ECS, RDS, and container registries.
• Manage development, staging, and production environments.

DevSecOps & CI/CD

• Implement secure CI/CD pipelines using GitLab.
• Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and Infrastructure-as-Code scanning.
• Establish quality and security gates within deployment pipelines.

Security Engineering

• Implement and enforce least-privilege IAM, EKS Pod Identity, network segmentation, container hardening, system hardening, mutual TLS (mTLS), secrets management, and encryption at rest and in transit.
• Develop and maintain security baselines and infrastructure standards.

Monitoring & Operations

• Configure observability, monitoring, logging, and alerting.
• Utilize monitoring platforms such as Dynatrace and Datadog.
• Support production deployments and incident response activities.
• Create and maintain operational runbooks.
• Implement and validate backup and disaster recovery procedures.

Identity & Access Management

• Integrate enterprise authentication and authorization solutions including ADFS, Active Directory, SAML, OIDC, and centralized account management systems.

Leadership & Governance

• Define cloud platform security architecture and standards.
• Conduct security reviews and vulnerability remediation activities.
• Collaborate with stakeholders on security and compliance requirements.
• Mentor engineering teams on DevSecOps best practices and promote a security-first engineering culture.

Mandatory Requirements

Experience

• Consultant: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
• Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation.
• Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Technical Skills

• Strong hands-on experience with AWS Cloud Infrastructure.
• Experience with Terraform or equivalent Infrastructure-as-Code technologies.
• Experience with Docker, Kubernetes, and Amazon EKS.
• Experience implementing CI/CD pipelines and deployment automation.
• Experience in infrastructure security, application security, and secure-by-design practices.
• Experience supporting production environments, monitoring, and incident management.

Preferred Skills

• Experience with Dynatrace and Datadog.
• Experience supporting or deploying applications built with Golang, Kotlin, Next.js, TypeScript, or Temporal on Kubernetes.
• Knowledge of ADFS, Active Directory, SAML, and OIDC.
• Exposure to Trend Micro FAM, OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA), Sitefinity, and Oracle technologies.