DevSecOps / ML Ops Engineer

ZHONG QI FUTURE (SINGAPORE) PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Zhong Qi Future (Singapore) Pte. Ltd. is seeking a Senior Consultant DevSecOps Engineer to design and maintain secure, scalable AWS infrastructure.

You will drive IaC adoption, implement automated security controls and oversee CI/CD pipelines with strong emphasis on governance and compliance. You will lead engineering teams, provide security-by-design guidance, and ensure reliable production operations with robust monitoring and incident response.

Qualifications

• 7+ years in DevOps, Cloud Infrastructure or DevSecOps roles.
• 2–3 years defining secure cloud architecture and standards.
• Experience deploying production AWS infrastructure.

Responsibilities

• Design, build and secure cloud-native AWS infrastructure.
• Implement IaC using Terraform or equivalent.
• Embed security into CI/CD pipelines and governance.
• Operate observability, incident response and runbooks.
• Collaborate with security teams on assessments and remediations.

Skills

Leadership

Problem solving

Team collaboration

Security mindset

Cloud computing awareness

Tools

AWS

Terraform

Docker

Kubernetes

GitLab CI/CD

Dynatrace/Datadog

Job description

DevSecOps Engineer (Senior Consultant)

Job Overview

We are seeking an experienced DevSecOps Engineer (Senior Consultant) to support a major Singapore public sector digital modernization initiative. In this role, you will be responsible for designing, implementing and maintaining secure, scalable and cloud-native infrastructure on Amazon Web Services (AWS). You will play a key role in integrating security throughout the software development lifecycle, establishing infrastructure security standards and ensuring the reliability and resilience of production environments.

The successful candidate will bring strong hands-on expertise in cloud infrastructure, Infrastructure as Code (IaC), containerization, CI/CD automation and cloud security, together with the ability to provide technical leadership and guidance to engineering teams.

Key Responsibilities

• Cloud Infrastructure & Architecture
  Design, build and maintain secure, scalable and cloud-native infrastructure on AWS across development, staging and production environments.
  Implement Infrastructure as Code (IaC) solutions using Terraform or equivalent technologies.
  Configure and manage AWS services, including VPC networking, Amazon EKS/ECS, RDS and container registries.
  Define and establish secure infrastructure architecture, technical standards and security baselines.
• DevSecOps & Cloud Security
  Embed security controls throughout the software development lifecycle and CI/CD pipelines.
  Implement security practices covering identity and access management, least-privilege IAM, network isolation, container hardening, secrets management, mTLS and data encryption.
  Integrate automated security scanning tools, including SAST, dependency, secret, container image and IaC scanning, into GitLab CI/CD pipelines.
  Establish security guardrails, infrastructure standards and governance practices to ensure consistent security compliance.
• Platform Operations & Observability
  Implement and maintain monitoring, logging, alerting and observability solutions using tools such as Dynatrace or Datadog.
  Support production deployments, troubleshoot infrastructure issues and resolve operational incidents.
  Develop and maintain operational documentation, technical runbooks and incident response procedures.
  Design, implement and periodically test backup, recovery and restoration procedures.
• Identity Management & Compliance
  Integrate cloud infrastructure with enterprise identity and access management solutions, including ADFS, WOG Active Directory, SAML, OIDC and GovTech Central Accounts Management (CAM).
  Collaborate with agency security teams to conduct security assessments, address compliance requirements and remediate identified vulnerabilities.
  Ensure infrastructure and application environments adhere to established security policies and technical standards.
• Technical Leadership
  Provide technical guidance and mentorship to engineering teams on secure cloud infrastructure and DevSecOps implementation.
  Influence engineering practices and promote security-by-design principles across development and operations teams.
  Evaluate technical solutions, communicate security risks and recommend appropriate mitigation strategies to stakeholders.

Requirements & Qualifications

Professional Experience

• Minimum 7 years of relevant hands-on experience in DevOps, Cloud Infrastructure, Cloud Engineering or DevSecOps.
• At least 2-3 years of experience in defining secure cloud architecture, establishing infrastructure security standards or leading DevSecOps implementations.
• Demonstrated experience designing, deploying and managing production-grade AWS infrastructure.
• Experience working with Singapore Government or public sector security frameworks and compliance requirements will be an advantage.

Technical Competencies - Essential

• Cloud Platform: Strong hands-on experience with AWS infrastructure and cloud services.
• Infrastructure as Code: Proficiency in Terraform or equivalent IaC technologies.
• Containerisation: Hands-on experience with Docker and Kubernetes, particularly Amazon EKS.
• CI/CD Automation: Experience designing, implementing and maintaining CI/CD pipelines, preferably using GitLab CI/CD.
• Cloud & Application Security: Strong understanding of infrastructure security, application security, identity management and secure deployment practices.
• Security Scanning: Practical experience implementing automated security scanning tools across application code, dependencies, secrets, containers and infrastructure configurations.
• Monitoring & Observability: Experience with at least one monitoring and observability platform.
• Production Operations: Experience supporting live production environments, incident management and operational troubleshooting.

Technical Competencies - Advantageous

• Familiarity with observability platforms such as Dynatrace and Datadog.
• Experience with ADFS, WOG Active Directory, SAML, OIDC and