Cloud Security & DevSecOps Engineer (Contract)

NEXBRIDGE RECRUITMENT PTE. LTD.; Singapore; In loco; SGD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

NEXBRIDGE RECRUITMENT PTE. LTD. is looking for a Senior Consultant to design and implement secure, cloud-native infrastructure on AWS. You will drive IaC with Terraform, manage EKS, enforce least-privilege IAM and security controls across dev, staging, and production environments.

You will mentor engineers, integrate security scanning into CI/CD, and ensure observability with tools like Dynatrace or Datadog, plus robust backup and incident response processes. Singapore-based role.

Competenze

• Hands-on experience setting up AWS cloud infrastructure.
• Terraform (or equivalent) for Infrastructure as Code.
• Hands-on experience with Docker and Kubernetes (EKS).
• Hands-on experience setting up CI/CD pipelines.
• Hands-on experience with security practices and scanning tools.
• Experience with at least one observability tool (Dynatrace or Datadog).
• Experience in production operations and security reviews.
• Nice to have: familiarity with GovTech security/compliance is a plus.

Mansioni

• Set up modern cloud-native, containerised infrastructure on AWS using IaC (Terraform) across dev, staging, production.
• Apply cloud security practices including least-privilege IAM, network isolation, and encryption.
• Integrate security scanning (SAST, dep, secret, container, IaC) into GitLab CI/CD with gates.
• Establish monitoring/observability using Dynatrace or Datadog and maintain runbooks.
• Support production deployments and incident resolution; design backups and restore procedures.
• Integrate infrastructure with identity controls (SAML, OIDC, CAM).
• Mentor engineers on secure infrastructure and DevSecOps practices.
• Engage with security reviews and remediation with agency security teams.

Conoscenze

AWS

Terraform

Docker

Kubernetes

CI/CD

Security

Observability

IaC

Strumenti

Dynatrace

Datadog

Descrizione del lavoro

Job Responsibilities

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production environments
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Build security into the development process by integrating SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates
• Set up and maintain monitoring, alerting and observability using tools such as Dynatrace or Datadog
• Support production deployments and incident resolution, including writing and maintaining runbooks
• Design, implement and regularly test backup and restore procedures
• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM)
• Senior Consultant: define the secured infrastructure architecture and security baseline for the platform
• Senior Consultant: set up and govern secure infrastructure standards, guardrails and practices across the team
• Senior Consultant: provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices
• Senior Consultant: work with agency security teams on security reviews, compliance requirements and remediation of findings

Job Requirements

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Terraform (or equivalent) for Infrastructure as Code
• Hands-on experience with Docker and Kubernetes (EKS)
• Hands-on experience setting up CI/CD
• Hands-on experience with application and infrastructure security practices
• Hands-on experience with security scanning tools
• Hands-on experience with at least one observability tool, e.g. Dynatrace or Datadog
• Hands-on experience in production operations
• Experience with Singapore Government or public sector security and compliance requirements is an advantage
• Good to have: familiarity with building, containerising and deploying applications in Golang, Kotlin and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Good to have: identity tooling such as ADFS, WOG AD, SAML, OIDC and CAM (GovTech Central Accounts Management)
• Good to have: Trend Micro FAM and other infrastructure/container security tooling
• Good to have: OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
• Security-first mindset with a practical, delivery-focused approach

We regret that only shortlisted candidates will be notified.