DevSecOps Engineer, Secure Cloud Infrastructure | Contract

NEXBRIDGE RECRUITMENT PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NEXBRIDGE RECRUITMENT PTE. LTD. seeks a hands-on Senior Consultant to design and operate secure cloud infrastructure on AWS. You will implement IaC with Terraform, manage Docker/Kubernetes deployments (EKS), and enforce security controls across dev, staging and production.

Responsibilities include integrating security scanning into pipelines, establishing monitoring with Dynatrace/Datadog, and building robust backup/restoration processes while guiding the team on DevSecOps practices.

Qualifications

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Terraform (or equivalent) for Infrastructure as Code
• Hands-on experience with Docker and Kubernetes (EKS)
• Hands-on experience setting up CI/CD
• Hands-on experience with application and infrastructure security practices
• Hands-on experience with security scanning tools
• Hands-on experience with at least one observability tool (e.g. Dynatrace, Datadog)
• Hands-on experience in production operations
• Experience with Singapore Government/public sector security/compliance is a plus
• Familiarity with Golang, Kotlin, Next.js/TypeScript and workflows on Kubernetes is beneficial
• Identity tooling such as ADFS, SAML, OIDC and CAM is advantageous
• Security tooling like Trend Micro FAM is a plus
• Experience with OutSystems/OPA/OIA/Sitefinity/Oracle is a plus
• Security-first mindset with delivery focus

Responsibilities

• Set up modern cloud-native, containerised infrastructure on AWS using IaC
• Apply cloud security practices including least-privilege IAM and network isolation
• Integrate security scanning into GitLab CI/CD pipelines with pass/fail gates
• Set up and maintain monitoring, alerting and observability with Dynatrace or Datadog
• Support production deployments and incident resolution; write runbooks
• Design and test backup and restore procedures
• Integrate infrastructure with identity controls (SAML/OIDC, AD)
• Define secured infrastructure architecture and guardrails
• Govern secure infrastructure standards across the team
• Guide engineers on secure infra and DevSecOps practices
• Collaborate with agency security teams on reviews and remediation

Skills

AWS cloud infrastructure

Terraform

Docker

Kubernetes

CI/CD

Security practices

Observability

Incident response

Backup testing

DevSecOps

Tools

Terraform (IaC)

Dynatrace

Datadog

GitLab CI/CD

ADFS

SAML / OIDC

Job description

Job Responsibilities

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production environments


• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit


• Build security into the development process by integrating SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates


• Set up and maintain monitoring, alerting and observability using tools such as Dynatrace or Datadog


• Support production deployments and incident resolution, including writing and maintaining runbooks


• Design, implement and regularly test backup and restore procedures


• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM)


• Senior Consultant: define the secured infrastructure architecture and security baseline for the platform


• Senior Consultant: set up and govern secure infrastructure standards, guardrails and practices across the team


• Senior Consultant: provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices


• Senior Consultant: work with agency security teams on security reviews, compliance requirements and remediation of findings

Job Requirements

• Hands-on experience setting up AWS cloud infrastructure


• Hands-on experience with Terraform (or equivalent) for Infrastructure as Code


• Hands-on experience with Docker and Kubernetes (EKS)


• Hands-on experience setting up CI/CD


• Hands-on experience with application and infrastructure security practices


• Hands-on experience with security scanning tools


• Hands-on experience with at least one observability tool, e.g. Dynatrace or Datadog


• Hands-on experience in production operations


• Experience with Singapore Government or public sector security and compliance requirements is an advantage


• Good to have: familiarity with building, containerising and deploying applications in Golang, Kotlin and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes


• Good to have: identity tooling such as ADFS, WOG AD, SAML, OIDC and CAM (GovTech Central Accounts Management)


• Good to have: Trend Micro FAM and other infrastructure/container security tooling


• Good to have: OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle


• Security-first mindset with a practical, delivery-focused approach

We regret that only shortlisted candidates will be notified.