20 days ago
Singapore, SingaporeMid Level / Senior
Responsibilities
- Own and scale AWS cloud environments and production Kubernetes on AWS EKS, including architecture, deployment, security, upgrades, autoscaling, observability, and troubleshooting.
- Provision and manage AWS services including RDS PostgreSQL, OpenSearch, Bedrock, and ELB.
- Design and operate secure multi-account AWS networks using VPCs, subnets, Transit Gateway, Network Firewall, WAF, PrivateLink, VPN, Direct Connect, and related controls.
- Establish service-level indicators and objectives, monitoring, alerting, logging, metrics, distributed tracing, incident response, root-cause analysis, capacity planning, backup and restore testing, and disaster recovery.
- Use Terraform to manage AWS and Kubernetes infrastructure and administer GitLab CI/CD pipelines with testing, security scanning, policy checks, approvals, promotion, rollback, and release traceability.
- Embed threat modeling, secure architecture reviews, vulnerability and patch management, penetration testing, hardening, remediation tracking, audit evidence, and risk assessments into the platform lifecycle.
- Implement least-privilege IAM, workload identity, privileged access controls, secrets and certificate management, container image signing and scanning, software bills of materials, dependency governance, and policy enforcement.
- Work with external vendors to document, reverse-engineer, and transition infrastructure operations in-house.
Requirements
- Typically 2 to 5+ years of hands-on experience in DevOps, DevSecOps, Cloud Engineering, or a similar role; candidates with fewer years may qualify through strong practical capability and production ownership.
- Production experience with Kubernetes and Terraform is mandatory, with strong experience designing, deploying, securing, operating, troubleshooting, and upgrading Kubernetes clusters and workloads.
- Strong AWS infrastructure and networking experience, including EKS, Kubernetes networking, VPCs, subnets, route tables, Transit Gateway, CIDR planning, centralized firewalls and egress, VPC endpoints, PrivateLink, Route 53 private DNS, security groups, network ACLs, VPN, and Direct Connect.
- Experience building and maintaining CI/CD pipelines, with GitLab preferred.
- Experience defining service-level objectives, monitoring and alerting, production incident response, root-cause analysis, capacity management, and backup, restore, and disaster-recovery arrangements.
- Experience operating systems under Singapore Government Commercial Cloud and IM8 requirements or comparable regulated frameworks such as banking, finance, healthcare, or critical infrastructure.
- Ability to document architecture, runbooks, operational procedures, risk assessments, and audit evidence and communicate infrastructure and security decisions to technical and non-technical stakeholders.
- Significant hands-on experience with agentic AI workloads, including agent observability, tracing, evaluation pipelines, secure tool and model connectivity, runtime isolation, rate limiting, and failure handling, is a bonus.
- Familiarity with production AI and machine-learning workloads, prompt and configuration management, AI observability, data-exposure protection, and responsible AI operational controls is a bonus.
Benefits
- Flexible work practices.
- 40 hours of self-development annually with access to learning opportunities.
- Opportunities for community impact through charity projects and volunteer days.
- Diversity, inclusion, digital inclusion, and environmental sustainability initiatives.
Tech Stack
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.