Cloud Security Specialist: IAM, IaC & Incident Response

Housing and Development Board; Singapore; On-site; SGD 60,000 - 110,000; Full time

Job summary

Housing and Development Board is recruiting a Cloud Security Specialist to safeguard cloud-based systems and applications. You will design, implement and maintain secure cloud architectures and IaC pipelines, collaborating with cross-functional teams across AWS/Azure/GCP environments.

The role emphasizes security policy enforcement, incident response, audits, and continuous monitoring with a focus on resilience and compliance in a public-sector context.

Qualifications

• 2+ years of designing, implementing and managing security in cloud environments (AWS/Azure/GCP).
• Knowledge of cloud security principles: network security, encryption, IAM, monitoring.
• Implemented security best practices within IaC (Terraform/CloudFormation/Ansible).
• Scripting for security automation is a plus (Python/PowerShell).

Responsibilities

• Review and enforce cloud security policies and architectures.
• Identify gaps and evaluate mitigations or third-party solutions.
• Design and implement secure cloud infrastructure and IaC pipelines.
• Maintain automation tools for provisioning, config management and incident response.
• Support audits and compliance with evidence of controls and reports.
• Monitor security incidents and coordinate remediation with stakeholders.
• Perform timely patching and monitor dashboards and alerts.
• Create security metrics and management reports.

Skills

Cloud security

IAM governance

IaC (Terraform)

Security monitoring

Scripting (Python)

CI/CD security

Cloud platforms

Tools

Terraform

CloudFormation

Ansible

Docker

Kubernetes

Git

Jenkins

Job description

Housing and Development Board is recruiting a Cloud Security Specialist to safeguard cloud-based systems and applications. You will design, implement and maintain secure cloud architectures and IaC pipelines, collaborating with cross-functional teams across AWS/Azure/GCP environments.

The role emphasizes security policy enforcement, incident response, audits, and continuous monitoring with a focus on resilience and compliance in a public-sector context.