Senior/Staff Software Engineer, Platform Engineering, Singpass
Senior/Staff platform engineer who architects and operates Singpass's multi-cluster Kubernetes/OpenShift infrastructure on AWS — designing resilient multi-region foundations, Istio-based zero-trust networking, Terraform/OpenTofu self-service infrastructure and ArgoCD GitOps — while setting standards via RFCs/ADRs and mentoring engineers.
- Compensation
- Not disclosed
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Devops
- Posted
Skills
Must have
- 6+ years in software/platform engineering
- 3+ years architecting and operating mission-critical production Kubernetes/OpenShift (OCP 4.x) platforms used by multiple teams
- Proven production experience with Istio (Ambient or sidecar topologies)
- Production experience with workload identity systems (SPIFFE/SPIRE or equivalent trust domain federation)
- Expert proficiency in Terraform or OpenTofu with a track record building reusable, well-documented module libraries
- Deep expertise in AWS enterprise environments (multi-account landing zones, VPC design, Transit Gateway, PrivateLink, egress filtering, managed databases)
- Practical experience with GitOps (ArgoCD)
- Experience with security remediation and SIEM integration in high-security environments
- Ability to establish technical standards and build consensus across teams via RFCs and architecture forums
- Habit of producing clear runbooks, system designs, and developer guides
- Demonstrated mentorship of engineers outside direct team with measurable career progression
Nice to have
- Experience with enterprise secrets management platforms (OpenBao or HashiCorp Vault)
- Exposure to distributed SQL databases (YugabyteDB, CockroachDB, or Google Cloud Spanner)
- Prior experience operating in high-availability, highly regulated environments (government, defense, or fintech)
- Hands-on reliability engineering experience (SLO/SLI design, incident management leadership)
- Familiarity with guardrails and tooling for AI-assisted software development
- Active contributions to CNCF or open-source infrastructure projects
Full description
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
[What you will be working on]
As a Senior/Staff Software Engineer in Platform Engineering, you will be the principal architect for our multi-cluster container infrastructure. You will shape the technical direction of the core foundations that every Singpass product team builds upon—focusing on resiliency, security compliance, observability, and developer velocity at a national scale.
Key Responsibilities
Platform Architecture & Resilience
- Architect Multi-Cluster Foundations: Design and evolve a resilient, hub-and-spoke multi-cluster OpenShift / Kubernetes infrastructure on AWS, optimizing for zero downtime, multi-region failover, cost efficiency, and performance.
- Advance Zero-Trust Infrastructure: Drive the implementation of Istio Ambient mesh, SPIFFE/SPIRE workload identity federation, mTLS, and fine-grained authorization policies across complex network topologies.
Platform Engineering & Developer Experience
- Build Golden Paths: Enable product teams by transforming tenant onboarding and infrastructure management into self-service workflows backed by modular, reusable Terraform/OpenTofu code and clear reference architectures.
- GitOps at Scale: Standardize declarative continuous delivery using ArgoCD (ApplicationSets, multi-cluster synchronization) and modern CI/CD pipelines.
Security, Compliance & Governance
- Fortify Security Posture: Lead platform security assessments and penetration test remediations; integrate SIEM logging, privileged access management (PAM), and tight egress controls.
- Drive Technical Governance: Author Architecture Decision Records (ADRs) and technical RFCs, leading cross-functional architecture reviews to set technical standards across Singpass.