Cloud Infrastructure Engineer

Assurity Trusted Solutions (ATS) is a wholly owned subsidiary of the Government Technology Agency (GovTech). As a Trusted Partner over the last decade, ATS offers a comprehensive suite of products and services ranging from infrastructure and operational services, authentication services, governance and assurance services as well as managed processes. In a dynamic digital and cyber landscape, where trust & collaboration are key, ATS continues to drive mutually beneficial business outcomes through collaboration with GovTech, government agencies and commercial partners to mitigate cyber risks and bolster security postures.

**Key Responsibilities**:
1. Security Architecture Design
- Design and implement secure architecture for cloud infrastructure (i.e AWS and GCP)
- Develop security blueprints and reference architectures for cloud-based systems.
- Define security requirements and controls for cloud deployments (IaaS, PaaS, SaaS)

2. Risk Management and Compliance
- Conduct threat modelling and risk assessments on cloud platforms and services.
- Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, SOC 2)
- Collaborate on audits and assessments related to cloud security posture.

3. Cloud Security Operations
- Define and enforce cloud security policies (e.g., IAM, network security, encryption)
- Implement and maintain security monitoring and logging solutions to detect and respond to security events.
- Lead response to cloud-related security incidents and vulnerabilities and participate in security incident response activities, providing technical expertise and contributing to post-incident analysis.

4. Governance and Strategy
- Provide strategic input on cloud security initiatives and roadmap.
- Stay current with the latest security trends, technologies, and best practices, and proactively recommend and implement improvements to streamline the automation and improve the security posture.
- Liaise with stakeholders to align security goals with business objectives.

5. Tooling and Automation
- Design, implement, and maintain automation scripts and tools to streamline security processes and improve efficiency.
- Implement security best practices within Infrastructure as Code (IaC) frameworks (e.g., Terraform, CloudFormation, ARM templates) to ensure secure infrastructure deployment and management.

**Requirements**:
1. Technical Skills
- Deep understanding of cloud security best practices, shared responsibility model, and cloud-native security controls.
- Proficiency in Identity and access management (IAM), encryption, network security, and security monitoring in cloud environments.
- Knowledge and experience with Infrastructure-as-Code (IaC) tools (e.g., Terraform, CloudFormation, ARM templates).
- Familiarity with DevSecOps practices and tools for CI/CD security integration.
- Experience with cloud security posture management (CSPM) and security incident response in cloud environments.
- Ability to evaluate and implement security tools (e.g., SIEM, WAF, vulnerability scanners, endpoint protection) in the cloud.
- Proven experience developing and integrating security tools into automation pipelines (e.g., GitLab, Jenkins, Ansible DevOps).
- Experience integrating security testing tools (e.g. SAST, DAST, SCA, vulnerability scanners).

2. Regulatory & Compliance Knowledge
- Familiarity with regulatory frameworks and standards (e.g., ISO 27001, NIST, SOC 2)
- Experience supporting audit and compliance activities in cloud environments.

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions**Benefits**
- We promote a learning culture and encourage you to grow and learn.
- Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
- Working in a collaborative environment with helpful team members