Platform Infrastructure Engineer - Flexible Public Tech

GovTech Singapore

Singapore

On-site

SGD 120,000 - 160,000

Full time

3 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Flexible work arrangements

Leave benefits & wellness programs

Job summary

GovTech Singapore is seeking a Platform Infrastructure Engineer to design, implement, and operate the private cloud network across multiple government data centres. You will deliver production network services, establish observability, and drive reliability through SRE practices.

The role requires hands-on experience with spine-leaf, eBGP/iBGP, OpenShift, Kubernetes, and IaC automation, along with on-call incident response and capacity planning. Singapore-based on-site work is expected.

Qualifications

Degree in Computer Science, Information Systems, Computer Engineering, or equivalent hands-on experience in a related field.
Familiar with spine-leaf topology, eBGP, iBGP, ECMP, MLAG, VRF isolation, routing, switching, VLANs, TCP/IP, DNS architecture, NTP architecture, DHCP, TLS, load balancing, Ansible, Python, Prometheus, syslog, and OpenTelemetry.
Experience in designing, implementing, operating, and automating data centre networks using infrastructure-as-code workflows.
Understanding of eBGP configuration including AS-path, route filtering, and multi-path load balancing.
Ability to troubleshoot complex network issues using packet capture, protocol analysis, and BGP debugging tools.
CCIE or equivalent industry certification preferred.
Understanding of DNS and NTP architecture design.
Multi-site or multi-data-centre network design with DNS, WAN routing, and failover.
Network performance tuning including MTU optimisation, jumbo frames, and QoS policies.
Experience with network observability, monitoring, SLIs, SLOs, alerting, and capacity planning.
Experience developing runbooks, participating in SRE on-call rotation, and driving reliability improvements from incident analysis.
Experience with AI/ML workload networking including RDMA, InfiniBand, RoCE, GPU-direct communication, and network tuning for distributed training workloads.
Knowledge/Hands-on with DWDM equipment is an advantage.
OpenShift, Kubernetes, OVN-Kubernetes, CNI, Ceph storage networking, VXLAN, and EVPN experience is an advantage.
Appreciation of data centre cabling and equipment design standards such as ANSI/TIA-568-D and EIA-310-E / IEC 60297-3-100 is an advantage.
Familiarity with modern software engineering practices — clean code, code review, testing strategies, and version control discipline — and experience with AI-assisted coding workflows including Spec-Driven Development (SDD), prompt engineering for code generation, and the use of AI coding tools (e.g. GitHub Copilot, Claude Code) in an engineering context.

Responsibilities

Design, implement, and operate spine-leaf network topology with eBGP, ECMP, MLAG, multi-plane VRF architecture, routers, switches, firewalls, DNS, NTP, OpenShift networking (OVN-Kubernetes, ingress, load balancers), DWDM equipment, L3 and L2 EVPN, and telco circuits for inter-site connectivity.
Implement network security zones, firewall policies, ACLs, traffic segmentation, design CI/CD processes and out-of-band zones to ensure traceability, accountability, and speed of rollback, and automate network configuration using Ansible, Python, and/or infrastructure-as-code, and integrate with platforms/dashboards.
Establish network observability, SLIs, SLOs, monitoring, alerting, capacity planning, develop runbooks, and participate in SRE on-call rotation, incident response, and blameless postmortems.