CR/097834 | DevSecOps

The client is looking for DevSecOps Engineers to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a Singapore public sector modernisation project. The role combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle. This role will be a 2-year direct contract with the client with an opportunity to renew or convert to permanent basis.

Key Responsibilities
All levels
● Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments.
● Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit.
● Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates.
● Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog.
● Support production deployments and incident resolution, including writing and maintaining runbooks.
● Design, implement, and regularly test backup and restore procedures.
● Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM).
 

Additional responsibilities for Senior Consultant
● Define the secured infrastructure architecture and security baseline for the platform.
● Set up and govern secure infrastructure standards, guardrails, and practices across the team.
● Provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices.
● Work with agency security teams on security reviews, compliance requirements, and remediation of findings.

The ideal candidate

● Consultant: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
● Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation.
● Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Technical Skillset (Must have)

● AWS: hands-on experience with setting up AWS cloud infrastructure
● Infrastructure as Code: hands-on experience with Terraform (or equivalent)
● Containers: hands-on experience with Docker, Kubernetes (EKS)
● CI/CD: hands-on experience in setting up CI/CD
● Security: hands-on experience with application and infra security practices
● Security scanning tools: hands-on experience with security scanning tools
● Observability: hands-on experience with at least one observability tool
● Operations: hands-on experience in production operations

Technical skills (good to have)
● Familiarity with observability tools such as Dynatrace, Datadog
● Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
● Identity: ADFS, WOG AD, SAML, OIDC, CAM (GovTech Central Accounts
Management)
● Trend Micro FAM and other infrastructure/container security tooling
● OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle

If you fit the bill, do feel free to apply to this job ad or you can send over an updated resume to irfan.m@jac-recruitment.com for a private and confidential conversation.

EA License: 90C3026 | EA Personnel: R22107188