全职 Cloud Security Engineer (AWS - Azure) 工作, 薪水, TeamLease Digital Global 公司招聘中 - Ricebowl

Cloud Security Engineer (AWS & Azure) – Singapore

Company: TeamLease Digital

Location: Singapore

Experience: Minimum 4 years

About the Role

TeamLease Digital is looking for experienced Cloud Security Engineers with strong expertise in AWS and Azure cloud security. The successful candidates will be responsible for securing cloud infrastructure, conducting security assessments, implementing cloud security controls, and strengthening security governance across cloud environments.

Experience supporting government, public sector or regulated cloud environments will be an added advantage.

Key Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments across AWS and Azure environments.
• Design, implement and maintain secure cloud architectures, landing zones, security guardrails and baseline configurations.
• Harden cloud infrastructure, virtual machines, containers and platform components in line with security standards.
• Develop scripts and Infrastructure as Code to automate security hardening, compliance checks and remediation.
• Implement identity and access management controls, least-privilege access, federation, secrets management and encryption.
• Configure and maintain cloud security controls, including firewalls, WAF, network segmentation and DDoS protection.
• Manage cloud security monitoring, logging, alerting and support for threat detection and incident response.
• Integrate security controls into CI/CD pipelines in collaboration with Cloud, DevOps and Application teams.
• Perform vulnerability assessments, configuration reviews and remediation tracking.
• Ensure compliance with security policies, data residency requirements and cloud governance standards.
• Collaborate with Engineering and Operations teams to resolve security findings and improve the overall cloud security posture.
• Support DevSecOps and Cloud Platform Security engineering activities when required.

Required Experience and Skills

• Minimum 4 years of experience in cloud security engineering, cloud security assessments and remediation.
• Working knowledge of AWS and Azure cloud platforms.
• Understanding of secure cloud architecture, cloud governance, account and subscription segregation, and security baselines.
• Knowledge of cloud identity and access management, network security, encryption, vulnerability management and security monitoring.
• Familiarity with cloud security automation, Infrastructure as Code and DevSecOps practices.

Preferred Technical Skills

• AWS Security: IAM, AWS Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector and WAF.
• Azure Security: Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor and Azure Firewall.
• Infrastructure as Code: Terraform, CloudFormation, Bicep or ARM templates.
• CI/CD: GitLab, Azure DevOps, GitHub Actions, Jenkins or equivalent tools.
• Cloud Security Platforms: Wiz, Prisma Cloud, Lacework, Orca or equivalent CSPM, CWPP or CNAPP solutions.
• Container Security: Kubernetes, AKS, EKS, image scanning, runtime protection and secrets management.
• Security Practices: IAM, PAM, Zero Trust, PKI, SIEM/SOAR, incident response, SAST, DAST and SCA.
• Compliance: CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable public sector regulatory requirements.

Education and Certifications

A degree or diploma in Computer Science, Engineering, Information Technology or a related discipline is required.

Relevant certifications are an advantage, including AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Azure Security Engineer Associate (AZ-500), CCSP, CCSK, CISSP or CISM.

Security testing certifications such as CEH, OSCP, GPEN or GWAPT are also beneficial.