Cloud Infrastructure & Security Engineer

BGC GROUP PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading consulting firm in Singapore is looking for a skilled Cloud Infrastructure & Security Engineer to modernise the AFC system and ensure its security and resilience. The candidate will design secure cloud solutions on AWS, develop security frameworks, and work with various stakeholders to integrate digital payment services. A minimum of 5 years experience in IT and cybersecurity is required, along with strong communication skills. This role offers a proactive work environment and opportunities for continued learning.

Qualifications

• At least 5 years of relevant experience in IT system architecture/design and implementation.
• Strong knowledge of IM8 data classification and security monitoring requirements.
• Understanding of Whole-of-Government security standards and compliance frameworks.

Responsibilities

• Design and manage secure cloud infrastructure solutions on AWS.
• Develop and enforce security controls based on IM8 risk management frameworks.
• Collaborate with stakeholders for secure integration of payment services.

Skills

IT Networking

System Administration

IT/OT Cybersecurity

Analytical Capabilities

Documentation Skills

Communication Skills

Education

Degree in IT, Computer Science, or Information Security

Tools

AWS

SIEM

EMV Security Standards

Job description

We are looking for a skilled Cloud Infrastructure & Security Engineer to join our System Architecture and Assurance Division, In this role, you will be instrumental in modernising the AFC system, ensuring that the platform remains secure, resilient, and aligned with national cybersecurity policies. You will work at the intersection of cloud architecture, cybersecurity, and digital payments.

Responsibilities

• Design, implement, and manage secure cloud infrastructure solutions (primarily on AWS or equivalent platforms) to support the AFC system, in compliance with Whole-of-Government (WOG) security requirements and GovTech’s IM8 policies.
• Develop and enforce security controls aligned with IM8 risk management frameworks, including data classification, access control, and monitoring standards across hybrid and cloud-native environments
• Architect and implement security measures tailored Card-Based Ticketing and Account-Based Ticketing (including EMV and Open-Loop payment systems), leveraging Singapore Government’s Tech Stack (SGTS) to ensure compliance with regulatory and operational standards
• Collaborate with internal stakeholders and external vendors to ensure secure integration of digital payment services within the national fare collection infrastructure
• Perform comprehensive system impact and risk analysis for mission-critical payment infrastructure, incorporating IM8 risk management frameworks.

Specific Requirements

• Knowledge in IT, Computer Science, Information Security, or related field
• At least 5 years of relevant experience in IT system architecture/design and implementation with strong knowledge in IT networking, system administration, and IT/OT cybersecurity requirement
• Understanding of IM8 data classification, SIEM, access management, encryption standards, and security monitoring requirements
• Working knowledge of Whole-of-Government (WOG) security standards, IM8 policy framework, and GovTech’s security architecture shall be highly preferred
• Familiarity with security design standards for EMV such as PCI-DSS shall be highly preferred
• Is systematic and has a structured work approach, can do good documentation
• Has strong analytical capabilities with good written and verbal communication skills, has a service mindset, demonstrates clarity of thoughts, is sufficiently assertive, and possesses strong abilities to comprehend issues and resolve conflicts
• Has a good sense of ownership and good interpersonal skills, is proactive and ready to go extra miles to deliver good quality work, and is able to work well both independently as well as in a team

Preferred Additional Qualifications

• AWS certifications (Solutions Architect Associate/Professional level)
• Experience implementing IM8 security controls and compliance frameworks
• Self-motivated approach to staying current with evolving cybersecurity and cloud technologies
• Knowledge of emerging technologies including 5G, AI/ML, IoT, and real-time analytics

How to Apply

📩 How to Apply:

Apply via MyCareersFuture.

Only shortlisted applicants will be contacted.

Laurence Andaya

(Reg No.: R23114253)

BGC Group Pte Ltd (Outsourcing)

By submitting your resume or personal data, you consent to BGC Group Pte Ltd collecting, using, and disclosing your personal data to our clients and partners for the purpose of evaluating your suitability for job opportunities and related recruitment services. You acknowledge that you have read, understood, and agree to our Privacy Policy for Job Applicants, available at https://bgc-group.com/notice-for-job-applicants.