GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity.
At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round.
Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today!
Learn more about GovTech at tech.gov.sg.
[What you will be working on]
As a Senior/Staff Software Engineer in Platform Engineering , you will be the principal architect for our multi-cluster container infrastructure. You will shape the technical direction of the core foundations that every Singpass product team builds upon—focusing on resiliency, security compliance, observability, and developer velocity at a national scale.
Key Responsibilities
Platform Architecture & Resilience
Architect Multi-Cluster Foundations: Design and evolve a resilient, hub-and-spoke multi-cluster OpenShift / Kubernetes infrastructure on AWS, optimizing for zero downtime, multi-region failover, cost efficiency, and performance.
Advance Zero-Trust Infrastructure: Drive the implementation of Istio Ambient mesh, SPIFFE/SPIRE workload identity federation, mTLS, and fine-grained authorization policies across complex network topologies.
Platform Engineering & Developer Experience
Build Golden Paths: Enable product teams by transforming tenant onboarding and infrastructure management into self-service workflows backed by modular, reusable Terraform/OpenTofu code and clear reference architectures.
GitOps at Scale: Standardize declarative continuous delivery using ArgoCD (ApplicationSets, multi-cluster synchronization) and modern CI/CD pipelines.
Security, Compliance & Governance
Fortify Security Posture: Lead platform security assessments and penetration test remediations; integrate SIEM logging, privileged access management (PAM), and tight egress controls.
Drive Technical Governance: Author Architecture Decision Records (ADRs) and technical RFCs, leading cross-functional architecture reviews to set technical standards across Singpass.
Technical Leadership & Mentorship
Build Engineering Capability: Mentor senior and mid-level engineers across teams, elevating technical craft, fostering shared ownership of critical systems, and cultivating a strong engineering culture.
[What We Are Looking For]
Technical Capabilities
Scale & Expertise: 6+ years in software/platform engineering, with 3+ years architecting and operating mission-critical production Kubernetes/OpenShift (OCP 4.x) platforms used by multiple engineering teams.
Service Mesh & Identity: Proven production experience with Istio (Ambient or sidecar topologies) and workload identity systems (SPIFFE/SPIRE or equivalent trust domain federation).
Infrastructure as Code (IaC): Expert proficiency in Terraform or OpenTofu, with a track record of building reusable, well-documented module libraries adopted across organizations.
Cloud & Networking Depth: Deep expertise in AWS enterprise environments (multi-account landing zones, VPC design, Transit Gateway, PrivateLink, egress filtering, and managed databases).
Modern Operations & Security: Practical experience with GitOps (ArgoCD), security remediation, SIEM integration, and architectural compliance in high-security environments.
Leadership & Influence
Cross-Team Alignment: Proven ability to establish technical standards and build consensus across disparate teams via RFCs, architecture forums, and clear trade-off analysis.
Documentation First: A natural habit of producing clear, accessible runbooks, system…