Cloud Infrastructure Engineer

Assurity Trusted Solutions Job Post

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a trusted partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

Key Responsibilities

1. Security Architecture Design

• Design and implement secure architecture for cloud infrastructure (i.e AWS and GCP)
• Develop security blueprints and reference architectures for cloud-based systems.
• Define security requirements and controls for cloud deployments (IaaS, PaaS, SaaS)

2. Risk Management and Compliance

• Conduct threat modelling and risk assessments on cloud platforms and services.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2)
• Collaborate on audits and assessments related to cloud security posture.

3. Cloud Security Operations

• Define and enforce cloud security policies (e.g., IAM, network security, encryption)
• Implement and maintain security monitoring and logging solutions to detect and respond to security events.
• Lead response to cloud-related security incidents and vulnerabilities and participate in security incident response activities, providing technical expertise and contributing to post-incident analysis.

4. Governance and Strategy

• Provide strategic input on cloud security initiatives and roadmap.
• Stay current with the latest security trends, technologies, and best practices, and proactively recommend and implement improvements to streamline the automation and improve the security posture.
• Liaise with stakeholders to align security goals with business objectives.

5. Tooling and Automation

• Design, implement, and maintain automation scripts and tools to streamline security processes and improve efficiency.
• Implement security best practices within Infrastructure as Code (IaC) frameworks (e.g., Terraform, CloudFormation, ARM templates) to ensure secure infrastructure deployment and management.
• Integrate security tools and practices seamlessly into the CI/CD pipeline, including static and dynamic application security testing (SAST/DAST), vulnerability scanning, and security configuration management.