DevSecOps Engineer

3 CUBED BUSINESS CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

3 Cubed Business Consulting PTE. LTD. is hiring a Senior Consultant to design, deploy, and operate secure, cloud-native infrastructure on AWS for a Singapore public sector modernization project.

You will embed security across infrastructure and development lifecycles, using IaC, container technologies, and CI/CD practices. You will mentor engineers, collaborate with security teams, and establish baselines and guardrails for secure platforms, while ensuring ongoing reliability and incident

Qualifications

• Hands-on experience setting up AWS cloud infrastructure.
• Hands-on experience with Infrastructure as Code tools such as Terraform.
• Hands-on experience with container technologies including Docker and Kubernetes (EKS).
• Hands-on experience configuring CI/CD pipelines.
• Hands-on experience applying application and infrastructure security practices.

Responsibilities

• Design, deploy cloud-native, containerized infrastructure on AWS using IaC (Terraform) across dev, staging, and production environments.
• Implement cloud security controls including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit.
• Integrate security into development pipelines by embedding SAST, dependency, secret, container image, and IaC scanning with pass/fail gates in GitLab CI/CD.
• Configure and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog.
• Support production deployments and resolve incidents by creating and updating runbooks.
• Design, implement, and test backup and restore procedures regularly.
• Integrate infrastructure with identity and access management systems including ADFS, WOG AD, SAML, OIDC, and CAM.
• Mentor engineers on secure infrastructure and DevSecOps practices.
• Collaborate with agency security teams on security reviews, compliance, and remediation of findings.

Skills

AWS Cloud

Terraform IaC

Docker

Kubernetes (EKS)

CI/CD pipelines

Security best practices

DevSecOps

Security reviews

Tools

Terraform

GitLab CI/CD

Dynatrace

Datadog

Job description

Company Overview

3 Cubed Business Consulting is headquartered in Singapore, providing IT consulting, solutions, and services across Asia Pacific. Since 2015, it delivers comprehensive end-to-end IT solutions, driven by customer purpose and passion.

Job Summary

Design, build, and operate secure, cloud-native, containerized infrastructure on AWS for a Singapore public sector modernization project, embedding security throughout infrastructure and development lifecycles.

Responsibilities

• Design and deploy cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform) across development, staging, and production environments
• Implement cloud security controls including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Integrate security into development pipelines by embedding SAST, dependency, secret, container image, and IaC scanning with pass/fail gates in GitLab CI/CD
• Configure and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog
• Support production deployments and resolve incidents by creating and updating runbooks
• Design, implement, and test backup and restore procedures regularly
• Integrate infrastructure with identity and access management systems including ADFS, WOG AD, SAML, OIDC, and CAM
• For Senior Consultant: Define secure infrastructure architecture and security baselines for the platform
• For Senior Consultant: Establish and govern secure infrastructure standards, guardrails, and best practices across teams
• For Senior Consultant: Mentor engineers on secure infrastructure and DevSecOps practices
• For Senior Consultant: Collaborate with agency security teams on security reviews, compliance, and remediation of findings

Required competencies and certifications

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Infrastructure as Code tools such as Terraform
• Hands-on experience with container technologies including Docker and Kubernetes (EKS)
• Hands-on experience configuring CI/CD pipelines
• Hands-on experience applying application and infrastructure security practices