Engineer/ Senior Engineer (Cloud Platform – NGPO iATM)

Public Service Division; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

CAAS's Next Generation Programme Office seeks a strong engineer to help implement the iATM workstream, covering flight plan filing, air traffic flow management, and cyber and data security measures.

You will work with CSPs, GovTech, and contractors to define architectures, IaC patterns, CI/CD controls, and observable readiness, across procurement, implementation, testing, and handover.

Successful candidates join on a 3-year contract with potential permanent placement and travel overseas as needed.

Qualifications

• Experience delivering large-scale ICT systems across the project lifecycle.
• Strong knowledge of cloud, security-by-design, and systems administration.
• Self-motivated with the ability to work independently and with cross-functional teams.
• Willingness to travel overseas occasionally.
• Certifications in Cloud/DevOps are advantageous.

Responsibilities

• Engage stakeholders to gather requirements and translate them into technical work packages.
• Define cloud platform architecture including landing zones, IAM, networking, compute, and storage.
• Lead engagements with CSPs and contractors to shape the target cloud environment.
• Review vendor sizing, IaC standards, deployment and release management, and security controls.
• Support system integration, testing readiness, and operational handover.

Skills

Cloud architecture understanding

Linux administration

Networking (VPC DNS TLS)

IAM and cybersecurity

Containers & Kubernetes

CI/CD/DevSecOps

Tools

Terraform

Ansible

Docker

Kubernetes

Job description

[What the role is]

The Next Generation Programme Office (NGPO) in CAAS is seeking a strong, driven, and dynamic engineer to be part of the Info-Centric Air Traffic Management (iATM) workstream.

You will be part of the team overseeing the implementation of Next Generation iATM systems, including (but not limited to) flight plan filing and air traffic flow management. You will play a key role across multiple phases of the project lifecycle, such as approvals, procurement, implementation, testing, maintenance, and system enhancements.

Depending on the project phase, you will work with relevant stakeholders to define system architectures, gather requirements, formulate technical specifications, manage procurement processes, and oversee system implementation, commissioning, maintenance, and enhancements in accordance with Singapore Government and applicable international standards (e.g. SG IM8, ICAO). You will also support the implementation of cyber and data security measures and contribute to the safe and efficient management of air traffic in Singapore.

[What you will be working on]

Key responsibilities include:

• Engage internal and external stakeholders to gather requirements, clarify constraints (e.g. security, networking, availability, cloud technology limitations), and translate needs into actionable technical work packages.
• Support the definition of cloud platform and environment architecture, including landing zones, network segmentation, identity, compute, and storage, and contribute to technical specifications and implementation plans.
• Lead or participate in technical engagements with Cloud Service Providers (CSPs), GovTech, and appointed contractors to shape the target cloud environment approach on GCC, including account or subscription structure, IAM, networking, and baseline security controls.
• Review vendor sizing and service selections, including virtual machines, containers, and managed services, to assess whether they meet performance, reliability, scalability, and cost objectives.
• Support the definition of Infrastructure-as-Code (IaC) and configuration management standards, such as Terraform/Ansible patterns, module reuse, and review controls, and assess vendor deliverables against these standards.
• Support the definition of deployment and release management expectations, including CI/CD controls, quality gates, and rollback strategies, and review vendor pipeline designs and implementation evidence.
• Contribute to DevSecOps and security-by-design requirements, such as scanning, secrets management, and policy-as-code where applicable, and verify contractor compliance through reviews, testing evidence, and audit artefacts.
• Support the definition of observability and operational readiness requirements, including logging, monitoring, alerting, SLO/SLA, and runbooks, and review vendor proposals, test results, and readiness or handover evidence.
• Support the development of integration approaches between systems, applications, and databases using APIs, middleware, and event-driven patterns where applicable.
• Support issue resolution through root-cause analysis (RCA) and track corrective and preventive actions to closure.
• Support the definition and governance of integration testing and acceptance criteria, including test plans, environment readiness, and defect triage, and validate that contractor evidence meets the required outcomes.
• Support project governance activities with project managers, including inputs for procurement, technical evaluations, design/specification approvals, and stakeholder coordination.
• Contribute to project delivery by tracking technical deliverables, dependencies, risks, and timelines, and support delivery in line with approved plans and budgets.
• Identify technical and integration risks, assess their impact, and recommend mitigation plans to minimise delays and operational impact.
• Review, comment on, and maintain key technical documents and vendor submissions, such as system design documents, interface control documents, test plans, and acceptance artefacts, to support procurement, delivery, operations, and audit requirements.
• Assist in coordinating security reviews and support the closure of findings, including hardening, vulnerability remediation, and security monitoring requirements, in accordance with organisational and regulatory requirements.
• Engage stakeholders to support proper system integration, testing, and operational readiness for air traffic operations.
• Provide regular status updates, highlight issues early, and propose resolution options to management.

[What we are looking for]

• Trained in Computer Science, Information Technology, Engineering (Computing), or equivalent practical experience.
• Experience in delivering large-scale ICT systems across the project lifecycle, including working with vendors or contractors on design reviews, implementation oversight, testing, acceptance, and operational handover, is preferred.
• Good understanding of cloud architecture, Linux or system administration, networking (VPC/VNet, routing, DNS, TLS), identity and access management, and cybersecurity; experience with containers and Kubernetes would be advantageous.
• Preferred technical skills include the following areas, and candidates are not expected to be experts in all areas: cloud fundamentals (compute, storage, networking, IAM, encryption/key management, and backup/disaster recovery); operational readiness (monitoring/alerting, incident and problem management, SLO/SLA, runbooks, and capacity and cost management); automation literacy (Terraform/Ansible concepts and Git-based workflows); container orchestration (Docker and Kubernetes); and CI/CD and DevSecOps concepts (pipeline controls, artifact/version management, security scanning, and secrets handling).
• Relevant certifications would be advantageous, such as Cloud Solution Architect, SysOps, DevOps Engineer, Kubernetes, security certifications such as CISSP, or project management certifications such as PMP or Agile/Scrum.
• Self-motivated with a strong sense of ownership, and able to work independently and collaboratively across teams and stakeholders.
• Strong written and verbal communication, stakeholder management, analytical, presentation, and negotiation skills, with attention to detail.
• Willingness to travel overseas occasionally.

Your appointment designation will commensurate with your relevant work experience. Successful candidates will be offered a 3-year contract in the first instance and may be considered for placement on a permanent tenure or subsequent contract renewal.