Senior Cloud Security Engineer (AWS)

TEAMLEASE DIGITAL SINGAPORE PTE. LTD.; Singapore; Sur place; SGD 120 000 - 180 000; Plein temps

Résumé du poste

TEAMLEASE DIGITAL SINGAPORE PTE. LTD. is seeking a senior cloud security engineer with architect-level AWS expertise and a strong software engineering background.

The role is hands-on, highly technical, and focuses on designing, building, and automating cloud-native security solutions within AWS. You will design secure landing zones, enforce container/Kubernetes security, and author IaC to embed security automation across AWS environments, including EKS, IAM, KMS, and WAF.

Qualifications

• Hands-on Terraform for infrastructure deployment.
• Strong software engineering foundation in Python.

Responsabilités

• Design and implement enterprise-grade AWS security architectures and multi-account landing zones.
• Operationalise native AWS security services (IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF).
• Enforce Zero Trust, strict IAM policies, and encryption at rest and in transit.
• Author and enforce security policies across Terraform templates.
• Build security automation and remediation tooling using Python.
• Secure EKS infrastructure and container runtimes with pod security, network policies, and secrets management.
• Automate remediation of cloud security risks across AWS landing zones.
• Deploy CNAPP/CSPM/CWPP to enforce continuous cloud posture.

Connaissances

IaC & Automation

AWS security

Kubernetes security

CKS knowledge

AWS Certifications

Outils

Terraform

Python

EKS

Description du poste

We are seeking a highly skilled Senior Cloud Security Engineer with deep, architect-level AWS expertise and a strong software engineering background. This is a hands-on, highly technical security engineering role focused on designing, building, and automatingcloud-native security solutions exclusively within AWS environments.

You will be responsible for designing secure AWS landing zones, enforcing container/Kubernetes security, and writing Infrastructure as Code (IaC) to embed security automation.

What We Are Looking For (Ideal CandidateProfile)

• Strong IaC & Automation Skills: Hands-on proficiency with Terraform for infrastructure deployment and a solid software engineering foundation in Python.
• AWS Security Architecture Expertise: Proven track record designing landing zones, account segregation strategies, and implementing AWS-native security services (e.g., AWS Control Tower, Organisations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, WAF).
• Kubernetes Security: Solid hands-on expertise in securing containerised workloads and Kubernetes clusters (EKS), equivalent to Certified Kubernetes Security Specialist (CKS) knowledge.
• Relevant Certifications (A plus, but not a guarantee):
• AWS Certified Solutions Architect – Professional; AWS Certified Security – Speciality
• Certified Kubernetes Security Specialist (CKS)

Who Should NOT Apply (Strict Exclusion Criteria)

To ensure alignment during the interview process, please review these exclusions before applying:

• Multi-Cloud / Non-AWS Primary Experience: We operate exclusively on AWS. Candidates without deep, hands-on AWS architect-level experience will not be considered.
• Management & Non-Technical Roles: Candidates whose primary experience is in managing security teams, P&L management, or SLA/vendor governance.
• SIEM, SecOps, GRC & VAPT: Candidates limited to SOC operations, SIEM monitoring, GRC compliance auditing, or standard VAPT/pen-testing activities.
• DevOps / CI-CD Scanners Only: Candidates whose cloud security experience is limited to configuring SAST, DAST, or SCA tools inside standard CI/CD pipelines.

Key Responsibilities

1. AWS Cloud Security Architecture &Governance

• Design and implement enterprise-grade AWS security architectures, multi-account landing zone structures (Control Tower / Organisations), and identity isolation models.
• Operationalise native AWS security services, including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, and AWS WAF.
• Enforce Zero Trust patterns, strict IAM policies, and robust data encryption at rest and in transit across all AWS services.

2. Infrastructure as Code (IaC) &Security Engineering

• Author, maintain, and enforce security policies across clean, modular Terraform templates.
• Build custom security automation, automated remediation scripts, and tooling using Python.
• Secure Amazon Elastic Kubernetes Service (EKS) infrastructure and container runtime environments, ensuring strict pod security, network policies, and secrets management.

3. Vulnerability Mitigation &Remediation

• Proactively analyze, prioritize, and automate the remediation of cloud security risks and misconfigurations across AWS landing zones.
• Deploy and manage Cloud Native Application Protection Platforms (CNAPP / CSPM / CWPP) to enforce continuous cloud posture compliance.

Requirements & Qualifications

Minimum Requirements

Education: Degree or Diploma in Computer Science, Information Technology, Computer/Electronics Engineering, or a related technical discipline

Experience: Minimum of 4+ years of hands-on experience in cloud security engineering, AWS architecture hardening, and automated risk remediation.

Technical Stack:

• Cloud: Deep AWS experience (Architect-level knowledge).

• IaC & Code: Advanced Terraform and Python.

  Containers: Hands-on EKS / Kubernetes security.