DevSecOps / ML Ops Engineer
Senior consultant building and securing cloud-native AWS infrastructure for a Singapore public sector digital modernization initiative: Terraform IaC, EKS/ECS containers, GitLab CI/CD with embedded security scanning, observability, and identity/compliance integration, while mentoring engineering teams.
- Compensation
- SGD 8.4K–SGD 10.8K / mo
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Devops
- Posted
Skills
Must have
- Minimum 7 years hands-on experience in DevOps, Cloud Infrastructure, Cloud Engineering or DevSecOps
- 2-3 years defining secure cloud architecture, infrastructure security standards or leading DevSecOps implementations
- Experience designing, deploying and managing production-grade AWS infrastructure
- Strong hands-on AWS infrastructure and cloud services experience
- Proficiency in Terraform or equivalent IaC technologies
- Hands-on Docker and Kubernetes experience, particularly Amazon EKS
- Experience designing, implementing and maintaining CI/CD pipelines, preferably GitLab CI/CD
- Strong understanding of infrastructure security, application security, identity management and secure deployment practices
- Practical experience with automated security scanning (SAST, dependency, secret, container image, IaC)
- Experience with at least one monitoring and observability platform
- Experience supporting live production environments, incident management and operational troubleshooting
- Strong security-first mindset with pragmatic, delivery-oriented approach
- Strong communication and technical documentation skills
Nice to have
- Experience with Singapore Government or public sector security frameworks and compliance requirements
- Familiarity with Dynatrace and Datadog observability platforms
- Experience with ADFS, WOG Active Directory, SAML, OIDC and GovTech Central Accounts Management (CAM)
- Exposure to Trend Micro FAM and other infrastructure or container security solutions
- Familiarity with developing, containerising and deploying applications using Golang, Kotlin and Next.js/TypeScript
- Experience operating workflow engines such as Temporal on Kubernetes
- Exposure to OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA) and Sitefinity
Full description
DevSecOps Engineer (Senior Consultant)
Job Overview
We are seeking an experienced DevSecOps Engineer (Senior Consultant) to support a major Singapore public sector digital modernization initiative.
In this role, you will be responsible for designing, implementing and maintaining secure, scalable and cloud-native infrastructure on Amazon Web Services (AWS). You will play a key role in integrating security throughout the software development lifecycle, establishing infrastructure security standards and ensuring the reliability and resilience of production environments.
The successful candidate will bring strong hands-on expertise in cloud infrastructure, Infrastructure as Code (IaC), containerization, CI/CD automation and cloud security, together with the ability to provide technical leadership and guidance to engineering teams.
Key Responsibilities
1. Cloud Infrastructure & Architecture
- Design, build and maintain secure, scalable and cloud-native infrastructure on AWS across development, staging and production environments.
- Implement Infrastructure as Code (IaC) solutions using Terraform or equivalent technologies.
- Configure and manage AWS services, including VPC networking, Amazon EKS/ECS, RDS and container registries.
- Define and establish secure infrastructure architecture, technical standards and security baselines.
2. DevSecOps & Cloud Security
- Embed security controls throughout the software development lifecycle and CI/CD pipelines.
- Implement security practices covering identity and access management, least-privilege IAM, network isolation, container hardening, secrets management, mTLS and data encryption.
- Integrate automated security scanning tools, including SAST, dependency, secret, container image and IaC scanning, into GitLab CI/CD pipelines.
- Establish security guardrails, infrastructure standards and governance practices to ensure consistent security compliance.
3. Platform Operations & Observability
- Implement and maintain monitoring, logging, alerting and observability solutions using tools such as Dynatrace or Datadog.
- Support production deployments, troubleshoot infrastructure issues and resolve operational incidents.
- Develop and maintain operational documentation, technical runbooks and incident response procedures.
- Design, implement and periodically test backup, recovery and restoration procedures.
4. Identity Management & Compliance
- Integrate cloud infrastructure with enterprise identity and access management solutions, including ADFS, WOG Active Directory, SAML, OIDC and GovTech Central Accounts Management (CAM).