Senior DevSecOps Engineer (AWS Cloud Security)

About the Role We are seeking an experienced Senior DevSecOps Engineer to lead the design, implementation, and operation of secure cloud-native infrastructure and DevSecOps practices in an enterprise environment. This role requires strong expertise across cloud infrastructure, security engineering, CI/CD automation, platform operations, and cloud governance. Key Responsibilities Cloud Infrastructure & Platform Engineering • Build and manage AWS cloud infrastructure using Terraform or equivalent Infrastructure-as-Code tools. • Provision and maintain Amazon VPC, Amazon EKS/ECS, RDS, and container registries. • Manage development, staging, and production environments. DevSecOps & CI/CD • Implement secure CI/CD pipelines using GitLab. • Integrate automated security controls including SAST, dependency scanning, secret scanning, container image scanning, and Infrastructure-as-Code scanning. • Establish quality and security gates within deployment pipelines. Security Engineering • Implement and enforce least-privilege IAM, EKS Pod Identity, network segmentation, container hardening, system hardening, mutual TLS (mTLS), secrets management, and encryption at rest and in transit. • Develop and maintain security baselines and infrastructure standards. Monitoring & Operations • Configure observability, monitoring, logging, and alerting. • Utilize monitoring platforms such as Dynatrace and Datadog. • Support production deployments and incident response activities. • Create and maintain operational runbooks. • Implement and validate backup and disaster recovery procedures. Identity & Access Management • Integrate enterprise authentication and authorization solutions including ADFS, Active Directory, SAML, OIDC, and centralized account management systems. Leadership & Governance • Define cloud platform security architecture and standards. • Conduct security reviews and vulnerability remediation activities. • Collaborate with stakeholders on security and compliance requirements. • Mentor engineering teams on DevSecOps best practices and promote a security-first engineering culture. Mandatory Requirements Experience • Consultant: 3–5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience. • Senior Consultant: 7+ years of experience, including at least 2–3 years defining secure cloud architecture or leading DevSecOps implementation. • Experience with Singapore Government or public sector security and compliance requirements is an advantage. Technical Skills • Strong hands-on experience with AWS Cloud Infrastructure. • Experience with Terraform or equivalent Infrastructure-as-Code technologies. • Experience with Docker, Kubernetes, and Amazon EKS. • Experience implementing CI/CD pipelines and deployment automation. • Experience in infrastructure security, application security, and secure-by-design practices. • Experience supporting production environments, monitoring, and incident management. Preferred Skills • Experience with Dynatrace and Datadog. • Experience supporting or deploying applications built with Golang, Kotlin, Next.js, TypeScript, or Temporal on Kubernetes. • Knowledge of ADFS, Active Directory, SAML, and OIDC. • Exposure to Trend Micro FAM, OutSystems, Oracle Policy Automation (OPA), Oracle Intelligent Advisor (OIA), Sitefinity, and Oracle technologies.