Security and IT Operations Engineer

HYDRAX PTE. LTD.; Singapore; On-site; SGD 52,000 - 72,000; Full time

Job summary

HYDRAX PTE. LTD. in Singapore is seeking an Associate Engineer to support security and IT operations. You will run internal IT administration, maintain control records for regulatory obligations, and assist infrastructure security and key management under supervision.

This hands-on role is ideal for an early‑career engineer building expertise in security within a regulated financial environment, collaborating with teams across Singapore and other Asia offices.

Qualifications

• 2–3 years of experience in IT operations, infrastructure support, systems administration or related role.
• Working knowledge of Linux and networking fundamentals.
• Familiarity with identity and access management concepts, including provisioning and access reviews.
• Some scripting ability in Python, bash or similar.
• Careful, methodical working habits with strict procedures.
• Clear written documentation and accurate record keeping.

Responsibilities

• Run internal IT administration for the Singapore office: account provisioning, onboarding/offboarding, endpoint security and asset inventory.
• Administer internal systems and access controls; prepare records for periodic access reviews.
• Provide IT support to staff and coordinate with service providers.
• Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews.
• Implement remediation on systems, including patching and access control fixes.
• Track remediation items and report status for closure.
• Prepare security and control metrics for ISMS and committee reporting.
• Support infrastructure security work: patching, vulnerability remediation, secure configuration.
• Assist security monitoring, log management and incident investigations.
• Support cryptographic key management under supervision.
• Maintain runbooks and audit-ready documentation.
• Support penetration testing and specialist assessments.

Skills

Linux

Networking basics

IAM concepts

Python scripting

Documentation

English proficiency

Tools

AWS

CI/CD

Infrastructure as Code

Job description

About Hydra X

Hydra X operates regulated market infrastructure for tokenised capital markets. Our clients include

banks, exchanges, asset managers and other financial institutions building and operating

institutional digital asset markets across Asia.

We hold licences in Singapore and other jurisdictions, and operate production systems that support

regulated financial market activity. The systems our engineers build and maintain must meet high

standards of reliability, security, auditability and operational resilience.

The Role

We are looking for an Associate Engineer to support our security and IT operations in Singapore. You

will run internal IT administration, maintain the technical control records our regulatory obligations

require, and support our infrastructure security and key management operations.

This is a hands‑on role suited to an engineer early in their career who wants to build a career in

security engineering inside a regulated financial institution. You will be trained on our infrastructure,

key management procedures and audit requirements, and you will work under supervision on

anything touching production and cryptographic material. You will work with engineering teams

across Singapore, Vietnam, China and Indonesia, and with Risk, Compliance and Operations in

Singapore.

Responsibilities

• Run internal IT administration for the Singapore office, including account provisioning, onboarding and offboarding, endpoint security and IT asset inventory.
• Administer internal systems and access controls, and prepare records for periodic access reviews by authorised reviewers.
• Provide IT support to staff, escalating or coordinating with service providers where appropriate.
• Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews and other regulatory reviews, including access records, change records and vulnerability remediation records.
• Implement agreed remediation on systems within scope, including patching, configuration changes and access control fixes.
• Track open remediation items, follow up with action owners and report status, and report status for review and closure.
• Prepare security and control metrics for ISMS and other committee reporting.
• Support infrastructure security work, including patching, vulnerability remediation, secure configuration and access control changes.
• Support security monitoring, log management and incident investigation alongside the engineering team.
• Support cryptographic key management operations under supervision, following documented procedures, dual control and segregation of duties.
• Maintain runbooks, operational records and supporting documentation to a standard that withstands audit.
• Support penetration testing and specialist assessments.

Requirements

• 2 to 3 years of experience in IT operations, infrastructure support, systems administration or a related technical role. Strong graduates with relevant internship experience will be considered.
• Working knowledge of Linux and networking fundamentals.
• Familiarity with identity and access management concepts, including account provisioning, permissions and access reviews.
• Some scripting ability in Python, bash or a similar language, or clear evidence of aptitude for it.
• Careful, methodical working habits. This role involves controlled procedures that must be followed exactly as written.
• Clear written documentation and accurate record keeping.
• Willingness to learn cryptographic key management, cloud security and regulatory technology requirements on the job.
• Strong written and verbal English.
• Based in Singapore, and able to attend on‑site infrastructure activities as required.

Good to Have

• Exposure to cloud infrastructure, preferably AWS.
• Exposure to CI/CD pipelines, infrastructure as code or configuration management tools.
• Experience working in an environment subject to external audit or regulatory inspection.
• Background in financial services, capital markets or digital asset infrastructure.
• Familiarity with key management or hardware security modules in any capacity.
• Relevant certifications such as CompTIA Security+, AWS Cloud Practitioner or Solutions Architect Associate, or equivalent.