Senior DevSecOps Engineer

Role:Senior DevSecOps Engineer What You Will Be Working On 1. Infrastructure Architecture & Highly Portable Systems ● Cloud Infrastructure: Design, harden, and operate enterprise Kubernetes (EKS) clusters on GCC+. ● Portable Architecture: Own the infrastructure design with a strict emphasis on portability. Configuration management, state, and workloads must be architected to allow easy porting across different Kubernetes environments without platform lock-in. ● Platform Deployment: Deploy, optimize, and manage our core enterprise open-source IRM platform using Helm charts, ensuring 24/7 high availability, multi-zone resilience, and self-healing capabilities for the Singpass pilot. 2. Backend & Custom Tooling (Strict Golang Ecosystem) ● Systems Programming: Lead the design and development of all internal backend services, custom SRE automation, DevOps pipelines, and system administration tooling. ● Strict Ecosystem Constraint: All backend code, APIs, and infrastructure tooling must be built exclusively in Golang. We maintain a strict zero-tolerance policy for Node.js (npm/pnpm) within our backend or infrastructure engineering ecosystem. 3. Technical Leadership & Agile Execution ● Team Leadership: Formally mentor and lead a dedicated squad of 5 engineers. Establish engineering excellence through rigorous code reviews, automated testing standards, and robust CI/CD practices. ● Agile Governance: Actively drive and participate in core agile ceremonies, including sprint planning, backlog grooming, and team retrospectives to foster a culture of continuous improvement. ● Strategic Alignment: Partner closely with the Product Manager and the Singpass Engineering Manager to scope technical roadmaps and translate mission requirements into scalable architecture. 4. Strict Engineering Governance ● Documentation as Code: Enforce absolute discipline regarding architectural decisions. You will be responsible for authoring and reviewing RFCs (Requests for Comments) and maintaining a rigorous repository of ADRs (Architecture Decision Records) to ensure all technical choices are transparent, debated, and well-documented. What You Will Gain From This Experience ● Elite SRE Mentorship: You will report directly to an experienced SRE Lead and Xoogler who has architected infrastructure and reliability for massive global products like Google Spanner, Google Meet, and YouTube. This is an unparalleled opportunity to pressure-test your engineering leadership against world-class Silicon Valley practices. ● Mastery in Cloud-Agnostic Design: Engineering a high-integrity platform on GCC+ that remains strictly decoupled and portable across Kubernetes environments is a premier SRE achievement. You will master the art of running resilient, open-source software within a zero-trust environment. ● High-Stakes Leadership Portfolio: Leading a 6-engineer squad to secure Singpass—Singapore's national digital identity platform—provides a definitive, high-visibility flagship project to headline your career portfolio. Success in this pilot sets the technical foundation for onboarding the rest of the Singapore government. What We Are Looking For Technical Mastery ● Expert-level knowledge of Kubernetes (EKS), Helm, Infrastructure-as-Code (IaC), and highly secure cloud infrastructure environments. ● Proven track record of designing highly portable, platform-agnostic Kubernetes manifests and configurations. ● Dual-Stack Development Skills: ○ Expert proficiency in Golang for high-integrity backend services, custom operators, and systems programming. ○ Solid proficiency/oversight capability in TypeScript and pnpm for modern frontend development. Engineering Culture & Leadership ● Strict Process Discipline: Deep familiarity and alignment with writing/maintaining ADRs and RFCs to drive technical consensus. ● Agile Delivery: Proven experience leading engineers within an active sprint environment and running impactful team retrospectives. ● A proven track record of mentoring mid/junior developers and translating ambiguous platform requirements into concrete technical designs. Preferred / Bonus Qualifications ● Prior experience deploying production workloads on GCC+ (Government Commercial Cloud) is a significant bonus. ● Experience engineering in high-integrity, air-gapped, or strictly regulated environments (e.g., FinTech, Defense, HealthTech) with intensive compliance and infrastructure-hardening requirements.