DevSecOps Engineer (Consultant / Senior Consultant)

About the Role

Our client is a technology services firm delivering a large-scale cloud modernisation programme for the Singapore public sector. They are seeking

DevSecOps Engineers

at both Consultant and Senior Consultant levels to design, build, and operate secure, cloud-native infrastructure that underpins critical government services. This is a high-impact role at the intersection of cloud infrastructure engineering, security, and software delivery — embedding security practices throughout the development lifecycle. If you are motivated by meaningful public-sector work and thrive in environments where rigorous security and reliable delivery go hand in hand, this role offers excellent scope and responsibility.

Key Responsibilities

All levels:

• Design and provision cloud-native, containerised infrastructure on AWS using Infrastructure as Code tools (e.g. Terraform), covering VPC networking, managed Kubernetes and container services, relational databases, and container registries across development, staging, and production environments

• Apply comprehensive cloud security controls, including least-privilege IAM policies, pod-level identity management, network isolation, system and container hardening, mutual TLS, secrets management, and encryption at rest and in transit

• Embed security into the software delivery process by integrating static analysis, dependency scanning, secret detection, container image scanning, and IaC scanning into CI/CD pipelines, with clearly defined quality gates

• Establish and maintain monitoring, alerting, and observability capabilities using industry-standard tooling to ensure platform health and rapid incident detection

• Support production deployments and incident response, including authoring and maintaining operational runbooks

• Design, implement, and periodically validate backup and disaster recovery procedures

• Integrate platform infrastructure with enterprise identity and access management systems using standard protocols such as SAML and OIDC

Additional responsibilities at Senior Consultant level:

• Define the overall secure infrastructure architecture and establish the security baseline for the platform

• Own and govern infrastructure standards, guardrails, and DevSecOps practices across the engineering team

• Mentor and guide engineers on secure infrastructure design and DevSecOps principles

• Collaborate with agency security stakeholders on compliance requirements, security reviews, and remediation of audit findings

Requirements