Platform Operations Engineer (Public Sector)

Overview

The Platform Operations Engineer will support a Singapore Government agency’s Amazon Web Services (AWS) environment hosted on the Government Commercial Cloud (GCC), managing the full lifecycle of cloud platform services across build, operate, and secure activities. The role covers cloud engineering and platform operations, Linux and Windows Server administration, Infrastructure-as-Code (IaC), DevSecOps, security compliance, and operational support to ensure the availability, reliability, security, and performance of cloud-hosted and agency-managed workloads.

The engineer will implement and maintain AWS platform services, support infrastructure provisioning and automation, perform system administration, monitoring, patching, incident and change management, and contribute to backup, recovery, and disaster recovery activities. All work must comply with applicable Singapore Government requirements and security frameworks, including IM8, the GCC Cloud Security & Governance Framework (CSGF), the Personal Data Protection Act (PDPA), and the Cybersecurity Act.

Scope of Work

Build & Engineering

• Design, provision, and configure AWS resources across compute, storage, networking, identity, database, and managed services within the Agency's AWS environment, consistent with GCC-provided guardrails, hardened images, and approved security baselines.

• Develop and maintain Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation and/or AWS CDK, with version control and peer review prior to deployment.

• Support workload migrations, application onboarding, and environment refreshes across Development, Test, Staging and Production environments.

• Configure and maintain CI/CD pipelines for infrastructure and application deployment, integrated with the Agency's approved DevSecOps toolchain.

• Implement and maintain AWS networking including VPCs, subnets, route tables, Security Groups, NACLs, VPC endpoints, Transit Gateway and load balancers, where applicable.

• Design, configure, and maintain Linux and Windows Server workloads on Amazon EC2, including OS hardening, domain integration, patching, certificate management, file services and related platform components.

• Configure and support commonly used AWS services such as EC2, S3, RDS, ELB/ALB/NLB, Route 53, Lambda, ECS/EKS, Systems Manager and Secrets Manager, where required by the Agency.

Operate & Maintain

• Perform day-to-day administration of the AWS environment including monitoring, patching, capacity management, cost optimisation, backup management and incident response.

• Maintain system availability in line with agreed Service Level targets.

• Monitor infrastructure and application health using Amazon CloudWatch, logs, metrics, dashboards and alerts.

• Manage backup, disaster recovery and business continuity configurations using services such as AWS Backup, RDS snapshots and cross-region/cross-account recovery arrangements, where applicable.

• Conduct periodic backup restoration and disaster recovery testing.

• Maintain accurate configuration records, architecture diagrams, operational procedures and runbooks, ensuring documentation is updated following material changes.

• Provide L2/L3 technical support and act as an escalation point for cloud infrastructure incidents, working within Agency-defined incident management procedures.

• Support change management activities including impact assessment, implementation planning, rollback planning and Change Advisory Board (CAB) submissions where applicable.

• Perform Linux and Windows Server administration including OS patching, system health checks, log reviews, capacity monitoring, service account coordination and troubleshooting.

• Support operational automation using AWS Systems Manager, Lambda, EventBridge, Python, PowerShell, Bash or equivalent tools to reduce repetitive manual activities.

Secure & Comply

• Implement and maintain security controls aligned to relevant IM8 requirements, including cloud security, data protection, identity and access management, network security, logging and security operations.

• Operate within the GCC Cloud Security & Governance Framework (CSGF), including compliance with mandated GCC guardrails, secured administrative access and centrally provided security services.

• Administer identity and access using the Agency's approved access model and AWS IAM, including IAM roles, policies and privileged access, enforcing least privilege and segregation of duties.

• Implement and maintain security services such as AWS CloudTrail, AWS Config, Security Hub, GuardDuty, Inspector, KMS, Secrets Manager and WAF, where applicable.

• Support continuous compliance monitoring, vulnerability management and remediation tracking, including timely closure of findings from GCC compliance scans, vulnerability assessments and penetration testing (VAPT).

• Maintain appropriate logging and audit trails using CloudTrail, CloudWatch Logs and other Agency-mandated security monitoring platforms.

• Ensure data classification, encryption at rest and in transit, key management and data residency requirements are implemented in accordance with IM8 and Agency requirements.

• Support audit and assurance activities, including evidence gathering for internal audits, GovTech compliance reviews and external certification audits such as MTCS SS 584 and ISO 27001, where applicable.

• Report and support investigation of security incidents in accordance with the Agency's Cyber Incident Response Plan and applicable Cybersecurity Act requirements.

• Apply Linux and Windows Server security baselines, access controls, endpoint protection, audit logging, vulnerability remediation and patching requirements in accordance with Agency policy, IM8 and applicable GCC security requirements.

Requirements

Required Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Technology, or related field.

• Minimum 3-5 years of hands-on experience administering AWS environments and Linux/Windows Server platforms in a production environment.
• Strong hands-on experience with core AWS services including:

• EC2

• S3

• RDS

• VPC

• IAM

• ELB / ALB / NLB

• Route 53

• CloudWatch

• CloudTrail

• Systems Manager

• AWS Backup

• KMS

• Secrets Manager

• Demonstrated experience with Infrastructure-as-Code, preferably Terraform and/or AWS CloudFormation.

• Strong understanding of AWS networking including VPCs, subnets, routing, Security Groups, NACLs, VPC endpoints and private connectivity.

• Experience administering Linux and Windows Server, including OS hardening, patch management, Active Directory integration, certificate management, backup, monitoring and troubleshooting.

• Experience with AWS security services such as Security Hub, GuardDuty, Inspector, AWS Config, CloudTrail, KMS and IAM.

• Prior experience working within a regulated, government or highly governed enterprise cloud environment is strongly preferred.

• Familiarity with Singapore Government GCC and IM8 requirements is an advantage.

• Working knowledge of DevSecOps practices, CI/CD pipelines using GitLab CI/CD, AWS CodePipeline/CodeBuild or equivalent tools, and scripting using Python, PowerShell and/or Bash.

• Experience supporting container platforms such as Amazon ECS and/or Amazon EKS is advantageous.

• Experience with AWS managed and serverless services such as Lambda, EventBridge, API Gateway, DynamoDB and Step Functions is advantageous.

Relevant Certifications Preferred

• AWS Certified Solutions Architect - Associate

• AWS Certified SysOps Administrator - Associate

• AWS Certified Developer - Associate

• AWS Certified Solutions Architect - Professional

• AWS Certified DevOps Engineer - Professional

• AWS Certified Security - Specialty, or equivalent current AWS security certification

Benefits

By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment.

You also represent to us that you have obtained the consent of your referees when you disclose to us their personal data for the purpose of conducting reference checks.

The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here:

We regret to inform you that should you not consent to providing the necessary data required for us to process your application, your application will be considered void.