{"id":239716,"url":"https://alion.io/job/government-technology-agency-grc-engineer-singpass","title":"Senior Software Engineer, Governance, Risk & Compliance (GRC), Singpass","company":{"id":162,"name":"Government Technology Agency","domain":"tech.gov.sg","url":"https://alion.io/company/government-technology-agency","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":58,"ghost_share":0.017,"stale_share":0.017,"repost_share":0.017,"time_to_fill_p50_days":77,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":54000,"max_usd":103000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":131},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"Helm","optional":false},{"name":"IAM","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kustomize","optional":false},{"name":"OpenShift","optional":false},{"name":"OpenTofu","optional":false},{"name":"Service Mesh","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SQL","optional":false},{"name":"Terraform","optional":false},{"name":"Time Series","optional":false},{"name":"TypeScript","optional":false},{"name":"YugabyteDB","optional":false},{"name":"CI/CD","optional":true},{"name":"ClickHouse","optional":true},{"name":"CockroachDB","optional":true},{"name":"Cosign","optional":true},{"name":"Grafana","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"JavaScript","optional":true},{"name":"Kyverno","optional":true},{"name":"Least Privilege","optional":true},{"name":"OpenSearch","optional":true},{"name":"PCI DSS","optional":true},{"name":"PostgreSQL","optional":true},{"name":"React.js","optional":true},{"name":"SBOM","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-08-06T13:37:24Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-03T00:46:21Z","board_verified":true,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":87},"description":"GovTech is the lead agency driving Singapore's Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government's capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity. At GovTech, we offer you a purposeful career to make lives better, and we help our people master their craft through learning and development opportunities all year round.\nSingpass is Singapore's national digital identity system. It provides high-assurance authentication, digital signatures, corporate identity (Corppass) and government-verified data sharing (Myinfo) to millions of residents and thousands of government and private-sector services. Because it is critical national infrastructure, Singpass is audited continuously against strict security and regulatory controls. Today, most of that audit evidence is collected by hand, point in time, in screenshots and spreadsheets. We want to replace that with continuous, machine-verified compliance: every control measured live, every piece of evidence produced automatically, and every drift detected within minutes instead of at the next audit cycle.\nThis is a hands-on software engineering role. You will design, write and operate production code and data pipelines. It is not a GRC analyst, audit management or policy-writing role. We are looking for engineers who treat compliance as a software problem: controls as code, evidence as data, audits as queries.\n[What you will be working on]\nYou will join the Singpass GRC engineering effort, working with the Core Platform team, which runs the shared foundations that every Singpass product team builds on: multi-cluster OpenShift on AWS, Istio Ambient service mesh, GitLab CI, ArgoCD GitOps, OpenBao secrets management and YugabyteDB distributed SQL. Your job is to instrument these systems so that their compliance posture can be observed, measured and proven continuously, and to bring the results together in a single pane of glass that auditors, security and engineering leadership can query 24/7.\nContinuous Controls Monitoring & Evidence Automation\nIntegrate with the delivery pipeline: Build integrations into GitLab CI and ArgoCD to capture change-management evidence automatically: who changed what, who reviewed and approved it, which tests and security scans ran, and what was deployed where. Target outcomes include signed artefacts, SBOMs, provenance attestations and separation of duties.\nInstrument the container platform: Collect and normalise control signals from OpenShift clusters, such as Compliance Operator / CIS benchmark results, admission and policy-engine decisions, RBAC and privileged-access state, network and authorization policies, image provenance and Kubernetes audit logs.\nInstrument the data tier: Build collectors for YugabyteDB clusters that cover database audit logs, role and privilege inventories, encryption and backup posture, and access reviews, while keeping overhead low on production workloads.\n Extend to the wider estate: Bring in signals from OpenBao (secret lifecycle, lease and rotation compliance), AWS (CloudTrail, Config, Security Hub, IAM), identity providers and SIEM, as the platform grows.\nCompliance Data Platform & Single Pane of Glass\n Design the evidence data model: Build a normalised, tamper-evident, time-series evidence store that maps raw technical signals to control objectives across frameworks (e.g. IM8, ISO/IEC 27001, NIST SP 800-53, CIS). Wherever possible, a single signal should satisfy many controls.\nBuild the pipelines: Write reliable, idempotent ingestion and transformation pipelines with clear lineage, so that every metric on the dashboard can be traced back to its raw evidence.\nDeliver live audit views: Build dashboards and APIs that show real-time control status, drift, exceptions and remediation SLAs. Auditors should be able to self-serve point-in-time and period-of-time evidence without filing a ticket.\nClose the loop: Turn failing controls into actionable alerts, tickets or pipeline gates for the owning team, and push fixes upstream into golden paths so that the compliant path is also the default path.\nEngineering Leadership\nWrite secure, production-ready code in Go. All GRC services, collectors, pipelines and tooling are written in Go. TypeScript is used only for frontend applications such as the audit dashboard. You will also work with SQL and infrastructure-as-code (Terraform/OpenTofu, Helm, Kustomize).\nAuthor Architecture Decision Records (ADRs) and RFCs, and turn ambiguous regulatory requirements into precise, testable technical controls together with Security, GRC and product teams.\nOwn what you build in production, including SLOs, monitoring, on-call and incident follow-up.\nMentor engineers, contribute to technical hiring, and help raise the security and reliability culture across Singpass.\n[What we are looking for]\nWe value strong engineering fundamentals over specific tools. Prior GRC experience is a bonus, not a requirement. If you have built serious platform or data systems and care about proving they are secure, we can teach you the frameworks.\nTechnical Capabilities\nEngineering depth: 5+ years of professional software engineering, building and operating production backend, platform or data systems. Strong proficiency in Go, including concurrency, testing and building production services and CLIs.\nKubernetes / OpenShift: Hands-on experience running workloads on Kubernetes or OpenShift, including a working understanding of the API server, RBAC, admission control, operators/controllers and audit logging. Experience writing controllers or operators is a strong plus.\n CI/CD & GitOps: Practical experience extending CI/CD systems (GitLab CI preferred) and GitOps tooling (ArgoCD), including APIs, webhooks, runners, and pipeline-level policy or attestation.\nData engineering: Experience designing data models and ingestion pipelines for event, log or time-series data, with strong SQL skills and good judgement on correctness, idempotency and lineage.\nSecurity fundamentals: Solid grasp of identity and access management, least privilege, encryption, secrets handling, logging integrity and secure software supply chains.\nWays of Working\nTranslation: You can read a control statement and turn it into a precise, automatable check, and you can explain a technical result clearly to an auditor or policy officer.\nOwnership: You don't wait for a ticket. You find gaps, ask why, and ship improvements end to end.\nDocumentation first: You write clear designs, runbooks and developer guides that scale knowledge beyond yourself.\n Integrity: You understand the responsibility of working on national identity infrastructure and handling sensitive audit data.\nPreferred Qualifications\nExperience with policy-as-code (OPA/Rego, Gatekeeper, Kyverno) or compliance-as-code frameworks (OSCAL, OpenSCAP, Compliance Operator).\nExperience with software supply-chain security, such as Sigstore/cosign, SLSA, in-toto attestations, and SBOM generation and analysis.\nExposure to distributed SQL databases (YugabyteDB, CockroachDB, PostgreSQL at scale), including database auditing and access governance.\nExperience with secrets management platforms (OpenBao or HashiCorp Vault) and AWS security services (CloudTrail, Config, Security Hub).\nFamiliarity with control frameworks and audit regimes such as IM8, ISO/IEC 27001, SOC 2, NIST SP 800-53, PCI DSS or MAS TRM.\nExperience building observability or analytics products (Grafana, OpenSearch, ClickHouse, or similar) used by non-engineering audiences.\nExperience building frontend applications in TypeScript (React or similar), for the audit dashboard.\nPrior experience in highly regulated, high-availability environments (government, defence, fintech).\n[What it is like working here]\nSecurity-first mindset: National identity infrastructure demands strong engineering discipline, attention to detail and a proactive approach to risk.\nGreenfield with real stakes: You will help define how Singpass proves its security posture, working on live production systems that the whole nation depends on.\nOwnership: Engineers shape product direction, argue for robust technical choices, and influence how national systems evolve.\nGo-first engineering: Go is the only language we use for services and tooling, and TypeScript is reserved for frontend applications. One toolchain means shared libraries, consistent security review and code that any engineer can pick up.\n Continuous learning: You will work across platform engineering, security, data and regulation alongside diverse teams across government.\n[What we offer you]\nGovTech is an equal opportunity employer committed to fostering an inclusive workplace that values diverse voices and perspectives, as we believe diversity is the foundation of innovation.\nOur employee benefits follow a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes.\nWe champion flexible work arrangements (subject to your job role) and trust you to manage your own time to deliver your best, wherever you are and whatever works best for you.\nLearn more about life inside GovTech at go.gov.sg/GovTechCareers. Stay connected with us on social media at go.gov.sg/ConnectWithGovTech.\nPlease note that this will be a 2-year fixed term contract.","description_format":"text","description_chars":9545,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government"],"lifecycle":[{"event":"open","at":"2026-09-05T10:22:47Z"},{"event":"close","at":"2026-09-30T23:18:33Z"},{"event":"reopen","at":"2026-10-05T10:13:51Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.828,"p_room":0.44,"age_days":87,"expected_fill_days":77,"reasons":["conf:3","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/government-technology-agency-grc-engineer-singpass","json_url":"https://alion.io/job/government-technology-agency-grc-engineer-singpass.json","meta":{"generated_at":"2026-11-03T01:10:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1330,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":162},"rest":"https://alion.io/mcp/rest/get_company?id=162"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgovernment-technology-agency-grc-engineer-singpass"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgovernment-technology-agency-grc-engineer-singpass"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgovernment-technology-agency-grc-engineer-singpass"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/government-technology-agency-grc-engineer-singpass\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgovernment-technology-agency-grc-engineer-singpass"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":239716}},{"tool":"search_jobs","arguments":{"company":"tech.gov.sg","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":239716},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}