Cloud Security Engineer — IaC, IAM & Incident Response

Government Technology Agency (GovTech); Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

GovTech is seeking a Cloud Security Specialist to design, implement, and maintain robust security for our cloud environments. You will work with cross-functional teams to enforce security policies, manage cloud architectures, and ensure compliance across AWS, Azure, and Google Cloud.

The role emphasizes IaC-based provisioning, automation, and incident response, with opportunities to influence security governance and risk remediation across government services.

Qualifications

• 2+ years designing, implementing and managing security in cloud environments.
• Understand cloud security principles: network, encryption, IAM, monitoring.
• IaC security practices with Terraform/CloudFormation/Ansible.
• Certifications such as CCSP, CISSP or AWS Security – Specialty are a plus.
• Proficiency in scripting (e.g., Python, PowerShell) for automation.
• Experience with container security (Docker, Kubernetes, AWS ECS).

Responsibilities

• Strategic Cloud Security Management: review and update security policies and cloud architectures.
• Cloud Security Operations & Response: design, implement, and maintain secure cloud infra; maintain IaC; monitor dashboards.
• Support audit and compliance activities; prepare detailed reports and evidence of controls.
• Lead remediation for security findings and coordinate with stakeholders.

Skills

Cloud security design

Incident response

Security metrics & reporting

IAM & encryption concepts

Threat modeling

Security governance

CI/CD & DevSecOps

Vulnerability management

Cloud security operations

Security auditing/compliance

Education

CCSP

CISSP

AWS Certified Security – Specialty

Tools

Terraform

CloudFormation

Ansible

Docker

Kubernetes

Git/GitLab/Jenkins

Job description

GovTech is seeking a Cloud Security Specialist to design, implement, and maintain robust security for our cloud environments. You will work with cross-functional teams to enforce security policies, manage cloud architectures, and ensure compliance across AWS, Azure, and Google Cloud.

The role emphasizes IaC-based provisioning, automation, and incident response, with opportunities to influence security governance and risk remediation across government services.