Overview
The Platform Operations Engineer will support a Singapore Government agency’s Amazon Web Services (AWS) environment hosted on the Government Commercial Cloud (GCC), managing the full lifecycle of cloud platform services across build, operate, and secure activities. The role covers cloud engineering and platform operations, Linux and Windows Server administration, Infrastructure-as-Code (IaC), DevSecOps, security compliance, and operational support to ensure the availability, reliability, security, and performance of cloud-hosted and agency-managed workloads.
The engineer will implement and maintain AWS platform services, support infrastructure provisioning and automation, perform system administration, monitoring, patching, incident and change management, and contribute to backup, recovery, and disaster recovery activities. All work must comply with applicable Singapore Government requirements and security frameworks, including IM8, the GCC Cloud Security & Governance Framework (CSGF), the Personal Data Protection Act (PDPA), and the Cybersecurity Act.
Scope of Work
Build & Engineering
Design, provision, and configure AWS resources across compute, storage, networking, identity, database, and managed services within the Agency's AWS environment, consistent with GCC-provided guardrails, hardened images, and approved security baselines.
Develop and maintain Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation and/or AWS CDK, with version control and peer review prior to deployment.
Support workload migrations, application onboarding, and environment refreshes across Development, Test, Staging and Production environments.
Configure and maintain CI/CD pipelines for infrastructure and application deployment, integrated with the Agency's approved DevSecOps toolchain.
Implement and maintain AWS networking including VPCs, subnets, route tables, Security Groups, NACLs, VPC endpoints, Transit Gateway and load balancers, where applicable.
Design, configure, and maintain Linux and Windows Server workloads on Amazon EC2, including OS hardening, domain integration, patching, certificate management, file services and related platform components.
Configure and support commonly used AWS services such as EC2, S3, RDS, ELB/ALB/NLB, Route 53, Lambda, ECS/EKS, Systems Manager and Secrets Manager, where required by the Agency.
Operate & Maintain
Perform day-to-day administration of the AWS environment including monitoring, patching, capacity management, cost optimisation, backup management and incident response.
Maintain system availability in line with agreed Service Level targets.
Monitor infrastructure and application health using Amazon CloudWatch, logs, metrics, dashboards and alerts.
Manage backup, disaster recovery and business continuity configurations using services such as AWS Backup, RDS snapshots and cross-region/cross-account recovery arrangements, where applicable.
Conduct periodic backup restoration and disaster recovery testing.
Maintain accurate configuration records, architecture diagrams, operational procedures and runbooks, ensuring documentation is updated following material changes.
Provide L2/L3 technical support and act as an escalation point for cloud infrastructure incidents, working within Agency-defined incident management procedures.
Support change management activities including impact assessment, implementation planning, rollback planning and Change Advisory Board (CAB) submissions where applicable.
Perform Linux and Windows Server administration including OS patching, system health checks, log reviews, capacity monitoring, service account coordination and troubleshooting.
Support operational automation using AWS Systems Manager, Lambda, EventBridge, Python, PowerShell, Bash or equivalent tools to reduce repetitive manual activities.
Secure & Comply
Implement and maintain security controls aligned to relevant IM8 requirements, including cloud security, data protection, identity and access…