DevOps Engineer (MVP – Deterministic Claims Rail)

You will be the primary DevOps engineer responsible for building, securing, automating, and operating the entire AWS environment for the MVP of the Singapore Claims Utility. You will work directly with the Enterprise Architect and the engineering vendor to ensure the platform is deterministic, reproducible, secure, and regulator ready. This role is hands-on — you will build pipelines, infrastructure, automation, and acceptance environments yourself. Key responsibilities

Design, deploy, and maintain all AWS components required for the deterministic MVP: VPC, subnets, routing, security groups, API Gateway (mTLS), Lambda execution environments, Step Functions orchestration, DynamoDB tables, S3 buckets, Cloud

Watch logs, metrics, alarms, KMS keys and encryption policies, IAM roles, policies, and VPC endpoints

Build and maintain all automation pipelines required for deterministic execution: GitHub Actions pipelines, Terraform IaC modules, deterministic replay harness pipeline, evidence pack generation pipeline, nightly scenario matrix execution, dashboard deployment pipeline, and acceptance testing pipelines

Implement automation for deterministic replay harness execution, evidence pack generation, concurrency test execution, offline parity validation, signed output packaging, and PHI free evidence pack delivery

Enforce security and compliance: PDPA gateway rules, zero PHI boundary, encrypted logs, tamper evident ledger storage, secure secrets management, TLS/mTLS enforcement, IAM least-privilege access, and audit log completeness

Prepare G0 → G1 acceptance environment, support vendor deployments, support EA in acceptance testing, run replay harness nightly, validate evidence pack correctness, ensure environment stability, and support regulator demonstrations

Work closely with Enterprise Architect, vendor engineering team, QA, Product, and Security to ensure architecture, pipelines, and infrastructure align with EA decisions

About you

• Strong AWS experience (Lambda, API Gateway, DynamoDB, S3, Cloud
• Watch, KMS)Expert-level Terraform

Expert-level GitHub Actions

• IAM, PKI, TLS/mTLS experience
• Docker and Linux experienceCI/CD automation experience
• Secrets management experience
• Monitoring and observability experience
• Distributed systems fundamentals
• Strong debugging skills (infrastructure and backend)

Least-privilege IAM, encryption at rest and in transit, TLS/mTLS, secrets management, audit log integrity, zero trust principles, and zero PHI boundary enforcement

Hands-on builder mindset

Fast learner

Strong communicator

• Comfortable working in regulated environments
• Disciplined and detail-oriented

Deterministic replay pipelines, reproducible execution environments, evidence pack automation, concurrency testing, offline parity validation, or signed output packaging experience (or willing to learn)

Step Functions experience, DynamoDB experience, Node.js/Python debugging, experience in regulated industries, or experience with deterministic systems (nice-to-have)