Senior AWS Cloud Security Engineer - Terraform & Kubernetes

TEAMLEASE DIGITAL SINGAPORE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

TEAMLEASE DIGITAL SINGAPORE PTE. LTD. is seeking a senior cloud security engineer with architect-level AWS expertise and a strong software engineering background.

The role is hands-on, highly technical, and focuses on designing, building, and automating cloud-native security solutions within AWS. You will design secure landing zones, enforce container/Kubernetes security, and author IaC to embed security automation across AWS environments, including EKS, IAM, KMS, and WAF.

Qualifications

• Hands-on Terraform for infrastructure deployment.
• Strong software engineering foundation in Python.

Responsibilities

• Design and implement enterprise-grade AWS security architectures and multi-account landing zones.
• Operationalise native AWS security services (IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF).
• Enforce Zero Trust, strict IAM policies, and encryption at rest and in transit.
• Author and enforce security policies across Terraform templates.
• Build security automation and remediation tooling using Python.
• Secure EKS infrastructure and container runtimes with pod security, network policies, and secrets management.
• Automate remediation of cloud security risks across AWS landing zones.
• Deploy CNAPP/CSPM/CWPP to enforce continuous cloud posture.

Skills

IaC & Automation

AWS security

Kubernetes security

CKS knowledge

AWS Certifications

Tools

Terraform

Python

EKS

Job description

TEAMLEASE DIGITAL SINGAPORE PTE. LTD. is seeking a senior cloud security engineer with architect-level AWS expertise and a strong software engineering background.

The role is hands-on, highly technical, and focuses on designing, building, and automating cloud-native security solutions within AWS. You will design secure landing zones, enforce container/Kubernetes security, and author IaC to embed security automation across AWS environments, including EKS, IAM, KMS, and WAF.