IT Infrastructure & Security

WHALET PTE. LTD.; Singapore; Presencial; SGD 120.000 - 180.000; Jornada completa

Descripción de la vacante

WHALET PTE. LTD. in Singapore is seeking an experienced infrastructure/DevOps engineer to deploy, operate and secure our cloud environment for payment workloads.

You will build monitoring, automate deployments with Terraform/Ansible and CI/CD, and ensure high availability while coordinating with regional teams. Ideal candidates have 4–6 years of production experience, strong Linux/networking fundamentals, and fluency in English and Mandarin, with on-call rotation willingness.

Formación

• Bachelor's degree in Computer Science, Information Technology, Information Security or a related field.
• 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running production systems.
• Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on Kubernetes.
• Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines.
• Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience operating relational databases and Redis.
• Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog.
• Practical security operations experience: SIEM, EDR, vulnerability management and incident response.
• Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or PCI DSS), including preparing documentation and evidence.
• Fluent English and Mandarin; willingness to participate in an on-call rotation.

Responsabilidades

• Deploy, operate and improve our Singapore cloud environment (compute, network, databases, storage), ensuring high availability and performance for payment workloads.
• Build and maintain monitoring, alerting, logging and capacity management; define and track service level objectives.
• Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines.
• Apply change management, release review and rollback discipline to protect production.
• Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability scanning; coordinate periodic penetration tests and track remediation.
• Manage identity and access, including privileged access, least privilege and segregation of duties.
• Operate security monitoring (SIEM) and respond to security incidents, including regular exercises.
• Implement technical controls aligned with the MAS Technology Risk Management Guidelines and Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements.
• Prepare and maintain security policies, procedures and evidence to support internal audits, external audits and MAS inspections.
• Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery tests.
• Support incident escalation and regulatory incident reporting within MAS timelines.
• Support due diligence and ongoing monitoring of cloud providers and other technology vendors, in line with MAS outsourcing and third-party risk expectations.
• Work with the China HQ technology team to apply group standards while meeting Singapore requirements, and with Compliance and Risk on technology risk reviews before new features go live.

Conocimientos

AWS

Kubernetes

Terraform

Ansible

CI/CD

Linux

Networking

SIEM/EDR

MAS TRM ISO27001

Mandarin English

On-call rotation

Educación

Bachelor's degree in Computer Science/Information Security or related field

Herramientas

AWS

Kubernetes

Terraform

Ansible

CI/CD

Prometheus

Grafana

Datadog

Descripción del empleo

Key Responsibilities

• Deploy, operate and improve our Singapore cloud environment (compute, network, databases, storage), ensuring high availability and performance for payment workloads
• Build and maintain monitoring, alerting, logging and capacity management; define and track service level objectives
• Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines
• Apply change management, release review and rollback discipline to protect production
• Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability scanning; coordinate periodic penetration tests and track remediation
• Manage identity and access, including privileged access, least privilege and segregation of duties
• Operate security monitoring (SIEM) and respond to security incidents, including regular exercises
• Implement technical controls aligned with the MAS Technology Risk Management Guidelines and Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements
• Prepare and maintain security policies, procedures and evidence to support internal audits, external audits and MAS inspections
• Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery tests
• Support incident escalation and regulatory incident reporting within MAS timelines
• Support due diligence and ongoing monitoring of cloud providers and other technology vendors, in line with MAS outsourcing and third-party risk expectations
• Work with the China HQ technology team to apply group standards while meeting Singapore requirements, and with Compliance and Risk on technology risk reviews before new features go live

Requirements

Essential

• Bachelor's degree in Computer Science, Information Technology, Information Security or a related field
• 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running production systems
• Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on Kubernetes
• Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines
• Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience operating relational databases and Redis
• Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog
• Practical security operations experience: SIEM, EDR, vulnerability management and incident response
• Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or PCI DSS), including preparing documentation and evidence
• Fluent English and Mandarin; willingness to participate in an on-call rotation

Strongly Preferred

• Experience supporting payment systems in production, such as cross-border remittance, e-wallets, card processing or FAST/PayNow
• Prior experience at an MAS-licensed financial institution or payments company, including MAS inspections
• Experience setting up infrastructure and controls in an early-stage or fast-growing environment

Nice to Have

• Certifications such as AWS, CKA/CKS, Security+, CISSP, CISM or OSCP

Personal Attributes

• Ownership mindset and composure under pressure
• Self-driven and comfortable working across time zones and cultures