18 hours ago
Singapore, SingaporeMid Level / Senior
Responsibilities
- Own and scale AWS environments and production Kubernetes on AWS EKS, including architecture, deployment, security, upgrades, autoscaling, resilience, observability, and troubleshooting.
- Administer AWS services including RDS PostgreSQL, OpenSearch, Bedrock, and ELB.
- Design and operate secure multi-account AWS networking using VPCs, subnets, Transit Gateway, firewalls, WAF, PrivateLink, DNS, VPN, and Direct Connect.
- Establish monitoring, alerting, logs, metrics, traces, service-level objectives, incident response, root-cause analysis, capacity planning, backup and restore testing, and disaster recovery.
- Use Terraform to manage infrastructure and administer GitLab CI/CD pipelines with testing, SAST, DAST, dependency and container scanning, policy checks, approvals, promotions, rollbacks, and release records.
- Implement security controls including threat modeling, architecture reviews, vulnerability and patch management, penetration testing, hardening, remediation tracking, audit evidence, and risk assessments.
- Manage IAM, workload identity, privileged access, secrets and certificates, container image signing and scanning, software bills of materials, dependency governance, and policy enforcement.
- Transition infrastructure operations from external vendors to the internal team by mapping architecture and reverse-engineering undocumented configurations.
Requirements
- Typically 2 to 5+ years of hands-on experience in DevOps, DevSecOps, Cloud Engineering, or a similar role; candidates with fewer years may qualify through demonstrated practical capability.
- Mandatory hands-on production experience with Kubernetes and Terraform, including designing, deploying, securing, operating, troubleshooting, and upgrading Kubernetes clusters and workloads.
- Strong AWS infrastructure and EKS experience, including Kubernetes networking, ingress controllers, load balancers, service discovery, network policies, CIDR planning, and restricted-egress troubleshooting.
- Strong knowledge of complex AWS networking in multi-account and regulated environments, including VPCs, subnets, route tables, Transit Gateway, firewalls, VPC endpoints, PrivateLink, Route 53 private DNS, security groups, network ACLs, VPN, and Direct Connect.
- Experience building and maintaining CI/CD pipelines, with GitLab preferred.
- Experience defining service-level objectives, monitoring and alerting, production incident response, root-cause analysis, capacity management, backup and restore, and disaster recovery.
- Experience operating systems under Singapore Government Commercial Cloud and IM8 requirements or comparable regulatory frameworks, with knowledge of audit evidence, risk acceptance, segregation of duties, change control, and sensitive-data handling.
- Ability to communicate infrastructure and security decisions and produce architecture diagrams, runbooks, operational procedures, risk assessments, and audit evidence.
- Significant hands-on experience with agentic AI workloads, including observability, tracing, agent harnesses, prompt and configuration versioning, evaluation pipelines, secure tool and model connectivity, runtime isolation, rate limiting, and failure handling, is a bonus.
- Familiarity with production AI and machine-learning workloads, model and agent deployment, prompt and configuration management, AI observability, data-exposure protection, and responsible-AI controls is a bonus.
Benefits
- Flexible work practices are offered.
- Employees receive 40 hours of self-development time annually and access to a broad selection of learning opportunities.
- The company supports diversity and inclusion, digital inclusion, community volunteering, and environmental sustainability initiatives.
Tech Stack
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.