Security and IT Operations Engineer

Hydrax Pte Ltd; Singapore; Hybrid; SGD 50,000 - 75,000; Full time

Job summary

Hydra X in Singapore seeks an Associate Engineer to support security and IT operations. You will run internal IT administration, maintain control records, and assist in infrastructure security and key management under supervision.

You'll learn cryptographic key management, cloud security, and regulatory tech in a regulated financial institution, collaborating with teams across Asia and Risk, Compliance and Operations in Singapore.

Qualifications

• 2 to 3 years in IT operations, infrastructure support, systems administration or related role.
• Working knowledge of Linux and networking fundamentals.
• Familiarity with identity and access management concepts, including provisioning and access reviews.
• Some scripting ability in Python, Bash, or similar.
• Careful, methodical working habits with procedures.
• Strong written English and documentation.

Responsibilities

• Run internal IT administration for Singapore office, including account provisioning and onboarding/offboarding.
• Administer internal systems and access controls; prepare records for access reviews.
• Provide IT support to staff and coordinate with service providers.
• Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews.
• Implement remediation on systems, including patching and access control fixes.
• Track remediation items and report status for review and closure.
• Prepare security and control metrics for ISMS and committee reporting.
• Support infrastructure security, patching, vulnerability remediation, and secure configuration.

Skills

Linux

Networking

IAM

Python

Documentation

English

Tools

AWS

CI/CD

Key management

Job description

Hydra X operates regulated market infrastructure for tokenised capital markets. Our clients include banks, exchanges, asset managers and other financial institutions building and operating institutional digital asset markets across Asia.

We hold licences in Singapore and other jurisdictions, and operate production systems that support regulated financial market activity. The systems our engineers build and maintain must meet high standards of reliability, security, auditability and operational resilience

About the role

We are looking for an Associate Engineer to support our security and IT operations in Singapore. You will run internal IT administration, maintain the technical control records our regulatory obligations require, and support our infrastructure security and key management operations.

This is a hands-on role suited to an engineer early in their career who wants to build a career in security engineering inside a regulated financial institution. You will be trained on our infrastructure, key management procedures and audit requirements, and you will work under supervision on anything touching production and cryptographic material. You will work with engineering teams across Singapore, Vietnam, China and Indonesia, and with Risk, Compliance and Operations in Singapore.

Responsibilities

• Run internal IT administration for the Singapore office, including account provisioning, onboarding and offboarding, endpoint security and IT asset inventory.
• Administer internal systems and access controls, and prepare records for periodic access reviews by authorised reviewers.
• Provide IT support to staff, escalating or coordinating with service providers where appropriate.
• Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews and other regulatory reviews, including access records, change records and vulnerability remediation records.
• Implement agreed remediation on systems within scope, including patching, configuration changes and access control fixes.
• Track open remediation items, follow up with action owners and report status, and report status for review and closure.
• Prepare security and control metrics for ISMS and other committee reporting.
• Support infrastructure security work, including patching, vulnerability remediation, secure configuration and access control changes.
• Support security monitoring, log management and incident investigation alongside the engineering team.
• Support cryptographic key management operations under supervision, following documented procedures, dual control and segregation of duties.
• Maintain runbooks, operational records and supporting documentation to a standard that withstands audit.
• Support penetration testing and specialist assessments.

What we're looking for

• 2 to 3 years of experience in IT operations, infrastructure support, systems administration or a related technical role. Strong graduates with relevant internship experience will be considered.
• Working knowledge of Linux and networking fundamentals.
• Familiarity with identity and access management concepts, including account provisioning, permissions and access reviews.
• Some scripting ability in Python, bash or a similar language, or clear evidence of aptitude for it.
• Careful, methodical working habits. This role involves controlled procedures that must be followed exactly as written.
• Clear written documentation and accurate record keeping.
• Willingness to learn cryptographic key management, cloud security and regulatory technology requirements on the job.
• Strong written and verbal English.
• Based in Singapore, and able to attend on-site infrastructure activities as required.

Good to have

• Exposure to cloud infrastructure, preferably AWS.
• Exposure to CI/CD pipelines, infrastructure as code or configuration management tools.
• Experience working in an environment subject to external audit or regulatory inspection.
• Background in financial services, capital markets or digital asset infrastructure.
• Familiarity with key management or hardware security modules in any capacity.
• Relevant certifications such as CompTIA Security+, AWS Cloud Practitioner or Solutions Architect Associate, or equivalent.

Apply here

Join the team to build the future of capital markets.