Cloud Security & DevSecOps Engineer (Contract)

Job Responsibilities

• Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS and container registry across dev, staging and production environments
• Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Build security into the development process by integrating SAST, dependency, secret, container image and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates
• Set up and maintain monitoring, alerting and observability using tools such as Dynatrace or Datadog
• Support production deployments and incident resolution, including writing and maintaining runbooks
• Design, implement and regularly test backup and restore procedures
• Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM)
• Senior Consultant: define the secured infrastructure architecture and security baseline for the platform
• Senior Consultant: set up and govern secure infrastructure standards, guardrails and practices across the team
• Senior Consultant: provide guidance and mentoring to engineers on secure infrastructure and DevSecOps practices
• Senior Consultant: work with agency security teams on security reviews, compliance requirements and remediation of findings

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Terraform (or equivalent) for Infrastructure as Code
• Hands-on experience with Docker and Kubernetes (EKS)
• Hands-on experience setting up CI/CD
• Hands-on experience with application and infrastructure security practices
• Hands-on experience with security scanning tools
• Hands-on experience with at least one observability tool, e.g. Dynatrace or Datadog
• Hands-on experience in production operations
• Experience with Singapore Government or public sector security and compliance requirements is an advantage
• Good to have: familiarity with building, containerising and deploying applications in Golang, Kotlin and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Good to have: identity tooling such as ADFS, WOG AD, SAML, OIDC and CAM (GovTech Central Accounts Management)
• Good to have: Trend Micro FAM and other infrastructure/container security tooling
• Good to have: OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle
• Security-first mindset with a practical, delivery-focused approach

Interested candidates are invited to apply via the “Apply Now” button.

We regret that only shortlisted candidates will be notified.

By submitting your personal data and CV, you consent to Nexbridge Recruitment Pte Ltd collecting, using and disclosing your personal data for recruitment purposes.

Nexbridge Recruitment Pte Ltd

EA License No: 26C3616

EA Personnel: Ching Ning Xin

Registration No: R22108651