About theRole: At Xtremax, we are looking for an experienced DevSecOps Engineer (Senior Consultant) to design, build, and operate secure, cloud-native, containerised infrastructure on AWS for a Singapore public sector modernisation project.
The role
combines infrastructure engineering, cloud security, and secure software delivery, embedding security across infrastructure and the development lifecycle.
Responsibilities
- Set up modern cloud-native, containerised infrastructure on AWS using Infrastructure as Code (e.g. Terraform), covering VPC networking, EKS/ECS, RDS, and container registry across dev, staging, and production environments. ● Apply cloud security practices and controls, including least-privilege IAM, EKS Pod Identity, network isolation, system and container hardening, mTLS, secrets management, and encryption at rest and in transit. ● Build security into the development process by integrating SAST, dependency, secret, container image, and IaC scanning into GitLab CI/CD pipelines, with defined pass/fail gates. ● Set up and maintain monitoring, alerting, and observability using tools such as Dynatrace or Datadog. ● Support production deployments and incident resolution, including writing and maintaining runbooks. ● Design, implement, and regularly test backup and restore procedures. ● Integrate infrastructure with identity and access controls (e.g. ADFS, WOG AD, SAML, OIDC, CAM). Additional responsibilities for Senior Consultant ● Define the secured infrastructure