DevSecOps Engineer

Company Overview

3 Cubed Business Consulting is headquartered in Singapore, providing IT consulting, solutions, and services across Asia Pacific. Since 2015, it delivers comprehensive end-to-end IT solutions, driven by customer purpose and passion.

Job Summary

Design, build, and operate secure, cloud-native, containerized infrastructure on AWS for a Singapore public sector modernization project, embedding security throughout infrastructure and development lifecycles.

Responsibilities

• Design and deploy cloud-native, containerized infrastructure on AWS using Infrastructure as Code (e.g., Terraform) across development, staging, and production environments
• Implement cloud security controls including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit
• Integrate security into development pipelines by embedding SAST, dependency, secret, container image, and IaC scanning with pass/fail gates in GitLab CI/CD
• Configure and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog
• Support production deployments and resolve incidents by creating and updating runbooks
• Design, implement, and test backup and restore procedures regularly
• Integrate infrastructure with identity and access management systems including ADFS, WOG AD, SAML, OIDC, and CAM
• For Senior Consultant: Define secure infrastructure architecture and security baselines for the platform
• For Senior Consultant: Establish and govern secure infrastructure standards, guardrails, and best practices across teams
• For Senior Consultant: Mentor engineers on secure infrastructure and DevSecOps practices
• For Senior Consultant: Collaborate with agency security teams on security reviews, compliance, and remediation of findings

Required competencies and certifications

• Hands-on experience setting up AWS cloud infrastructure
• Hands-on experience with Infrastructure as Code tools such as Terraform
• Hands-on experience with container technologies including Docker and Kubernetes (EKS)
• Hands-on experience configuring CI/CD pipelines
• Hands-on experience applying application and infrastructure security practices
• Hands-on experience using security scanning tools
• Hands-on experience with observability tools (e.g., Dynatrace, Datadog)
• Hands-on experience in production operations

Preferred competencies and qualifications

• Experience with Singapore Government or public sector security and compliance requirements
• Familiarity with observability tools such as Dynatrace and Datadog
• Familiarity with building, containerizing, and deploying applications using Golang, Kotlin, Next.js/TypeScript
• Experience operating workflow engines such as Temporal on Kubernetes
• Knowledge of identity management systems including ADFS, WOG AD, SAML, OIDC, CAM
• Experience with Trend Micro FAM and other infrastructure/container security tools
• Familiarity with OutSystems, Oracle Policy Automation (OPA) / Oracle Intelligent Advisor (OIA), Sitefinity, Oracle

Other Information

• Security-first mindset with a practical, delivery-focused approach
• Clear documentation and communication skills
• Senior Consultant: Ability to influence engineering teams and explain security trade-offs to stakeholders

• Employment Agency No.: 21S0778