About the Role
Our client is a technology services firm delivering a large-scale cloud modernisation programme for the Singapore public sector. They are seeking
DevSecOps Engineers
at both Consultant and Senior Consultant levels to design, build, and operate secure, cloud-native infrastructure that underpins critical government services. This is a high-impact role at the intersection of cloud infrastructure engineering, security, and software delivery — embedding security practices throughout the development lifecycle. If you are motivated by meaningful public-sector work and thrive in environments where rigorous security and reliable delivery go hand in hand, this role offers excellent scope and responsibility.
Key Responsibilities
All levels:
- Design and provision cloud-native, containerised infrastructure onAWSusing Infrastructure as Code tools (e.g. Terraform), covering VPC networking, managed Kubernetes and container services, relational databases, and container registries across development, staging, and production environments
- Apply comprehensivecloud security controls, including least-privilege IAM policies, pod-level identity management, network isolation, system and container hardening, mutual TLS, secrets management, and encryption at rest and in transit
- Embed security into the software delivery process by integrating static analysis, dependency scanning, secret detection, container image scanning, and IaC scanning intoCI/CD pipelines, with clearly defined quality gates
- Establish and maintain monitoring, alerting, and observability capabilities using industry-standard tooling to ensure platform health and rapid incident detection
- Support production deployments and incident response, including authoring and maintaining operational runbooks
- Design, implement, and periodically validate backup and disaster recovery procedures
- Integrate platform infrastructure with enterprise identity and access management systems using standard protocols such as SAML and OIDC
Additional responsibilities at Senior Consultant level:
- Define the overall secure infrastructure architecture and establish the security baseline for the platform
- Own and govern infrastructure standards, guardrails, and DevSecOps practices across the engineering team
- Mentor and guide engineers on secure infrastructure design and DevSecOps principles
- Collaborate with agency security stakeholders on compliance requirements, security reviews, and remediation of audit findings
Requirements
- Consultant level:Minimum 3 years of hands-on experience in DevOps, cloud infrastructure, or DevSecOps roles; Senior Consultant level:Minimum 7 years of relevant experience, including at least 2–3 years leading secure cloud architecture design or DevSecOps implementation
- Proven hands-on experience with AWS infrastructure provisioning, Infrastructure as Code (Terraform or equivalent), container orchestration usingKubernetes (EKS), and production-grade CI/CD pipeline setup
- Demonstrated experience applying application and infrastructure security practices, including the use of security scanning tools across code, dependencies, containers, and IaC
- Hands-on experience with production operations, including observability tooling, incident management, and runbook development
- Familiarity with observability platforms such as Dynatrace or Datadog(is a bonus)
- Experience with Singapore Government or public sector security and compliance frameworks(is a bonus); familiarity with identity integration (ADFS, SAML, OIDC) or container security tooling(is a bonus)