Total 20 computer security job vacancies in Islandwide

Key Responsibilities

1. Administer, configure, and maintain network security technologies, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control solutions.
2. Monitor network security events and investigate security alerts, incidents, and potential threats.
3. Implement and maintain firewall policies, network segmentation, access controls, and secure connectivity solutions.
4. Troubleshoot and resolve network security issues while ensuring minimal disruption to business operations.
5. Conduct security reviews, vulnerability assessments, and configuration audits of network infrastructure.
6. Support the design and implementation of secure network architectures and infrastructure solutions.
7. Create and manage security architecture and design artefacts that embed security principles into enterprise systems and ensure alignment with organizational architecture standards and business objectives.
8. Develop and maintain network security documentation, diagrams, standards, procedures, and operational guides.
9. Collaborate with infrastructure, application, and enterprise architecture teams to ensure security requirements are incorporated into projects and operational activities.
10. Support security incident response, root cause analysis, and remediation activities.
11. Assist with compliance, audit, and risk management initiatives by providing technical expertise and evidence of security controls.
12. Stay current with emerging cybersecurity threats, technologies, and industry best practices.

Required Skills and Experience

1. Strong understanding of networking concepts, including TCP/IP, routing, switching, DNS, DHCP, VPNs, and network segmentation.
2. Hands-on experience managing enterprise firewalls and security technologies.
3. Knowledge of network security principles, security monitoring, threat detection, and incident response.
4. Experience with vulnerability management and security hardening practices.
5. Ability to interpret security requirements and implement appropriate technical controls.
6. Strong analytical, troubleshooting, and problem-solving skills.
7. Excellent documentation and communication skills.

Qualifications

1. Bachelor’s degree in information technology, Computer Science, or a related field.
2. Minimum 7 Years of experience in network security, cybersecurity, or ICT infrastructure security roles.
3. Should have experience in Azure Cloud environment  

Required Certifications

1. CCNA or CCNP
2. PCNSA
3. AWS/Azure Certified

Job Tasks and Responsibilities

• Conduct cloud security assessments, architecture reviews and risk assessments for GCC and public sector cloud environments on AWS and Azure
• Design, implement and maintain secure cloud architecture, landing zones, guardrails and baseline configurations across AWS and Azure platforms
• Harden cloud infrastructure, services, virtual machines, containers and platform components based on approved security standards and benchmarks
• Develop scripts and Infrastructure as Code to automate cloud security hardening, monitoring, compliance checks and remediation activities
• Implement and manage cloud identity and access management controls including least privilege, federation, privileged access, secrets and key management
• Configure and maintain cloud security controls such as network segmentation, firewalls, WAF, DDoS protection, private connectivity and encryption
• Maintain cloud security monitoring, logging and alerting capabilities, and support threat detection, investigation and incident response activities
• Work with Cloud, DevOps and Application teams to integrate security controls into CI/CD pipelines and secure software delivery processes
• Perform vulnerability assessments, configuration reviews and remediation tracking for workloads deployed on AWS and Azure
• Conduct reviews to ensure compliance with security policies, public sector requirements, data residency controls and cloud governance standards
• Work with Engineering and Operations teams to manage cloud security findings and drive closure through the defect life cycle
• Improve cloud security processes, standards, playbooks and tools to enhance security posture and operational efficiency
• Take on a secondary role as a DevSecOps Engineer or Cloud Platform Security Engineer where required by project needs
• Collaborate with cross-functional teams to enhance security across the cloud development and operations pipeline

EXPERIENCE AND SKILLS NEEDED

• Min 4 years of experience in cloud security engineering, cloud security assessment, analysis and remediation
• Experience in AWS and Azure, including GCC and public sector / regulated cloud environments, will be an added advantage
• Experience in secure cloud architecture design, landing zones, account/subscription segregation and cloud governance will be an added advantage
• Experience in agile development environment will be an added advantage
• Experience with continuous integration and continuous delivery using GitLab, Azure DevOps, GitHub Actions, Jenkins or other similar tools will be an added advantage
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, Bicep, ARM templates or equivalent will be an added advantage
• Experience with AWS security services such as IAM, Organizations, Control Tower, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, WAF or equivalent will be an added advantage
• Experience with Azure security services such as Microsoft Entra ID, Azure Policy, Key Vault, Defender for Cloud, Microsoft Sentinel, Azure Monitor, Azure Firewall or equivalent will be an added advantage
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), CNAPP tools such as Wiz, Prisma Cloud, Defender for Cloud, Lacework, Orca or equivalent will be an added advantage
• Experience with container and Kubernetes security for AKS, EKS, image scanning, runtime protection and secrets management will be an added advantage
• Experience with IAM, PAM, zero trust, encryption, PKI, SIEM/SOAR, incident response and cloud logging will be an added advantage
• Experience with vulnerability management and cloud-native security testing tools, including SAST, DAST, SCA, secrets scanning or equivalent will be an added advantage
• Experience with compliance and governance standards such as CIS Benchmarks, NIST, ISO 27001, SOC 2, PCI DSS and applicable GCC / public sector regulatory requirements will be an added advantage
• Certified cloud and security professionals such as AWS Certified Security – Specialty, AWS Solutions Architect, Microsoft Certified: Azure Security Engineer Associate (AZ-500), Azure Solutions Architect, CCSP, CCSK, CISSP, CISM or equivalent will be an added advantage
• Security testing-specific certifications such as CEH, OSCP, GPEN, GWAPT or equivalent will be an added advantage.
• Degree or Diploma in Computer Science, Computer or Electronics Engineering, Information Technology or related disciplines.

Key Skills & Responsibilities

• Managed project planning, execution, and timely delivery of business objectives.
• Coordinated with clients to gather requirements and ensure service satisfaction.
• Collaborated with stakeholders and cross-functional teams to align project goals and expectations.
• Oversaw IT operations, incident management, and system performance monitoring.
• Developed interactive dashboards and reports using Power BI for business insights and decision-making.
• Analyzed operational and business data to identify trends, risks, and improvement opportunities.
• Prepared project documentation, status reports, and executive presentations using Microsoft Office tools.
• Utilized advanced Microsoft Excel, Word, PowerPoint, and Outlook for reporting, communication, and administrative activities.

IAM Operations

Manage the day-to-day operations of IAM systems, including provisioning, de-provisioning, and lifecycle management of user and machine identities. Administer and maintain Active Directory and LDAP directory services, ensuring accurate and up-to-date identity records across the environment. Operate and support One Identity solutions, handling configuration, troubleshooting, and routine maintenance. Process access requests in a timely manner, ensuring requests are fulfilled in accordance with established policies and approval workflows. Monitor IAM systems for anomalies, policy violations, and potential security threats, escalating and resolving issues promptly. Maintain accurate documentation of IAM configurations, procedures, access records, and operational runbooks.

Access Governance and Compliance

Support periodic access reviews and IAM audits, identifying and remediating access risks in line with internal policies and regulatory requirements. Assist in tracking IAM-related risks and remediation action plans, providing updates to relevant stakeholders. Generate reports on access activity, identity lifecycle status, and compliance posture for management and audit purposes.

Stakeholder Support

Serve as the first point of contact for IAM-related issues and queries from users and IT teams, providing clear and timely resolution. Work closely with the broader IT and security teams to ensure identity and access controls remain aligned with business needs. Maintain service quality and operational consistency as the team transitions project-focused members to new IAM initiatives.

The required managed services include, but are not limited to:

• Network Operations & Monitoring
  Continuous monitoring, proactive health checks, alerting, and backup verification.
• Incident & Problem Management
  End-to-end incident handling, root cause analysis (RCA), and timely resolution aligned with SLA commitments.
• Infrastructure Management & Lifecycle
  Management of network devices including routers, switches, firewalls, and load balancers, as well as upgrades and lifecycle activities.
• Security Management
  Firewall policy management, log monitoring, compliance checks (e.g., CIS benchmarks), and threat escalation.
• Patch & Vulnerability Management
  Vulnerability scanning, patch deployment, prioritization, and compliance reporting.
• Asset & Configuration Management
  CMDB updates, asset reconciliation, and configuration tracking.
• Change & Release Management
  Execution of changes in accordance with ITIL processes, including risk assessment and rollback planning.
• Capacity & Performance Management
  Monitoring, trend analysis, and capacity planning recommendations.
• Documentation & Reporting
  Maintenance of network documentation, SOPs, and delivery of operational and monthly performance reports.

Technology Environment

The environment includes (but is not limited to):

• Cisco (routers, switches, load balancing technologies)
• Palo Alto firewalls
• Check Point firewalls
• F5 Load Balancers

Deliverables

• Daily operational monitoring and reporting
• Monthly service reports covering SLA performance, incidents, patch compliance, security posture,asset reconciliation, and capacity planning

Job Summary:

The Messaging &Collaboration Architect is responsible for designing, implementing, and governing enterprise messaging platforms across hybrid environments, including Microsoft Exchange Server (On-Premises), Exchange Online, and Microsoft 365services hosted within Microsoft Azure.

This role provides architectural leadership for messaging transformation initiatives, cloud migration programs, platform modernization, and operational governance. The architect ensures secure, scalable, highly available, and compliant messaging services while enabling seamless collaboration across the enterprise.

In addition, the role works closely with infrastructure, security, cloud, and workplace teams to define messaging strategies, establish technical standards, and support enterprise transformation initiatives.

Key Responsibilities:

Messaging Architecture &Strategy

·      Define enterprise messaging and collaboration architecture standards.

·      Develop strategic roadmaps for Exchange modernization and Microsoft 365 adoption.

·      Design hybrid messaging architectures supporting coexistence between on-premise and cloud environments.

·      Establish messaging governance, security, compliance, and operational standards.

·      Lead technical assessments and architecture reviews for messaging-related initiatives.

·      Ensure architecture aligns with enterprise technology and cloud strategies.

Microsoft Exchange Platform Architecture

·      Design and govern Microsoft Exchange Server environments (2016, 2019, Subscription Edition).

·      Design Exchange Online architectures within Microsoft 365.

·      Architect hybrid Exchange deployments and migration strategies.

·      Define mailbox resiliency, high availability, disaster recovery, and backup architectures.

·      Design transport, routing, mail flow, and message hygiene solutions.

·      Lead platform capacity planning and performance optimization initiatives.

Microsoft 365 & Azure Integration

·      Architect Microsoft 365 messaging and collaboration services.

·      Design Azure-integrated messaging solutions supporting hybrid cloud operations.

·      Implement and govern Azure networking requirements supporting Exchange Online connectivity.

·      Design identity integration leveraging Azure Active Directory and Entra ID.

·      Support integration with Microsoft Teams, SharePoint Online, OneDrive, and related collaboration services.

·      Ensure secure cloud adoption through modern authentication and conditional access controls.

Messaging Security &Compliance

·      Design secure messaging environments aligned with Zero Trust principles.

·      Architect email protection solutions including:

o  Microsoft Defender for Office 365

o  Exchange Online Protection (EOP)

o  Anti-spam and anti-phishing controls

o  Data Loss Prevention (DLP)

o  Information Protection and Sensitivity Labels

·      Ensure compliance with enterprise security standards and regulatory requirements.

·      Support eDiscovery, retention policies, legal hold, and audit requirements.

·      Collaborate with cybersecurity teams on threat management and incident response.

Cloud Migration &Transformation

·      Lead Exchange migration projects from on-premise environments to Microsoft 365.

·      Design mailbox migration strategies and coexistence models.

·      Develop migration runbooks, technical procedures, and rollback plans.

·      Assess legacy environments and recommend modernization approaches.

·      Provide architecture leadership for tenant consolidation, mergers, acquisitions, and divestitures.

·       Drive adoption of modern workplace and collaboration technologies.

Service Delivery &Operational Governance

·      Establish operational standards and support models for messaging services.

·      Define monitoring, reporting, and service health management requirements.

·      Ensure adherence to ITIL processes including Incident, Problem, Change, and Configuration Management.

·      Support major incident management and root cause analysis activities.

·      Participate in service reviews and continuous improvement initiatives.

·      Define platform KPIs, SLAs, and operational metrics.

Automation & AI-Enabled Operations

·       Design automation solutions for messaging administration and operational activities.

·       Utilize PowerShell scripting for provisioning, administration, and reporting.

·       Promote Infrastructure as Code and automation-first approaches where applicable.

·       Leverage Microsoft Copilot and AI-enabled operational tools to improve support efficiency.

·       Develop operational dashboards and reporting capabilities using Power Platform technologies.

Collaboration &Stakeholder Management

• Work closely with Infrastructure, Cloud, Security, Workplace, and Application teams.
• Provide technical leadership and mentorship to engineers and administrators.
• Present architecture recommendations to senior management and customers.
• Facilitate design workshops and architecture review sessions.
• Maintain architecture documentation, standards, and knowledge repositories.

Required Skills & Qualifications:

·      8+ years of experience in Microsoft Messaging and Collaboration technologies.

·      Hands-on experience with:

o  Microsoft Exchange Server (2013/2016/2019/SE)

o  Exchange Online

o  Microsoft365 Administration

o  Hybrid Exchange Deployments

o  Azure Active Directory / Entra ID

o  Azure Networking Concepts

o  Microsoft Teams Integration

o  Mail Flow and Transport Services

o  PowerShell Automation

o  Messaging Migration Projects

·      Strong knowledge of:

o  Hybrid Messaging Architectures

o  High Availability and Disaster Recovery

o  Authentication and Identity Management

o  Email Security Technologies

o  Compliance and Governance Frameworks

o  Microsoft Licensing Models

o  Enterprise Infrastructure Platforms

·      Experience supporting:

o  Large-scale enterprise messaging environments

o  Cloud transformation programs

o  Messaging modernization initiatives

o  Managed services operations

Key Competencies :

·      Enterprise Architecture Thinking

·      Technical Leadership

·      Strategic Planning

·      Solution Design

·      Stakeholder Management

·      Problem Solving and Troubleshooting

·      Communication and Presentation Skills

·      Risk Assessment and Mitigation

·      Documentation and Governance Discipline

·     Customer-Focused Mindset.

Qualifications and Certifications :

·       Education

• Bachelor's Degree in Information Technology, Computer Science, Engineering, or equivalent experience.

·       Preferred Certifications

• Microsoft Certified: Messaging Administrator Associate
• Microsoft Certified: Enterprise Administrator Expert
• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Security Operations Analyst Associate

o   ITIL Foundation or ITIL 4 Managing Professional

·       Advantageous Certifications

o  TOGAF

o  CISSP

Observability Engineering:

•Architect, deploy, and optimize Splunk ITSI dashboards, KPIs, glass tables, and service maps.

•Continuously enhance visibility into the health and performance of applications and infrastructure.

Proactive Monitoring & Investigation:

•Leverage observability data to investigate system issues and anomalies in real-time.

•Identify root causes using advanced event correlation, log analysis, and telemetry patterns.

Predictive Analytics & ML Integration:

•Apply machine learning models to detect anomalies, forecast system behavior, and prevent outages.

•Collaborate with data teams to operationalize predictive analytics for IT incident management.

Service Mapping with ServiceNow:

•Maintain and automate the synchronization of Configuration Items (CIs) from ServiceNow to Splunk.

•Ensure accurate service correlation and dependency mapping across platforms.

As a (job role), you will need to have:

•Degree in Computer Science, Engineering, Information Systems, or equivalent.

•Hands-on experience with Splunk ITSI or similar observability platforms.

•Strong knowledge of ServiceNow, including CMDB and CI relationships.

•Familiarity with machine learning for anomaly detection and predictive analytics.

•Proficient in scripting (Python, linux) for automation.

•Understanding of ITIL and modern IT operations practices.

•Analytical mindset with strong troubleshooting and investigation skills using observability data.

Job Scope

As a Systems Specialist, you will be providing support in the following areas:

a) Administration and maintenance of the following:

• Backup System, CA-1

• z/OS operating system and JCL (Job Control Language)

• Tape management systems and automated tape libraries

• Backup hardware (Data domain/ECS/ Hitachi CGX/Tape library)

b) Carrying-out security patching, hardening, upgrade of the abovementioned software as and when required

c) Carrying-out installation and configuration of the abovementioned backup software

d) Monitor system performance and capacity planning for backup storage requirements

e) Work with hardware and software vendor to resolve technical issue

f) Review logs from the abovementioned hardware and software

g) Participate in technical exercises as and when required.

Requirements

a) Minimum 3-5 years experience with mainframe backup systems, specifically CA-1

b)Strong knowledge of z/OS operating system and JCL (Job Control Language)

c) Understanding of mainframe storage concepts including DASD, tape, and virtual storage

d) Experience with tape management systems and automated tape libraries

e) Minimum 2 years of relevant working experience in technology related to abovementioned hardware and software is preferred

f) Must be able to work beyond business hours including weekend when necessary

g) Possess good interpersonal and communication skills

h) Have good command of written and oral English

Job Scope

You will be providing support for the following areas:

a) Reviewing and optimising SQL queries written by application developers to ensure optimal performance and adherence to database standards

b) Assisting in database design activities, including table structures, indexes, and relationships to support new application features or enhancements

c) Troubleshooting database-related issues reported by application teams, including SQL error codes, performance problems, and data integrity concerns

d) Supporting database changes through the development lifecycle (DEV, TEST, UAT, PROD), including coordinating database object migrations between environments

e) Monitoring application database performance and implementing necessary tuning measures like reorganising tablespaces, updating statistics, and adjusting buffer pools

f) Providing guidance to application developers on DB2 best practices, coding standards, and efficient query writing techniques

g) Supporting application testing activities by helping with data refresh requests, test data preparation, and database-related test case validation

Requirements

a) Strong background in IT, Computer Science / Computer Engineering, or related discipline

b) Minimum 5 years of relevant working experience in the above technology is preferred.

c) Relevant experience in the following would be advantageous:

• Working with JCL (Jon Control Language)

• Understanding of VSAM and other mainframe storage concepts

• Familiar with database utilities and tools

• Experience with database backup and recovery procedures

d) Possesses good communication and interpersonal skills

e) Have good command of written and oral English

f) Must be able to work beyond business hours including weekend when necessary

Job Description: 

1) Provide technical support and maintenance for mainframe tools including JOBSCAN, ChangeMan SCM and IBM ADFz bundle products such as FILE MANAGER & DEBUG Software

2) Support the transition from ChangeMan to IBM ADFz bundle products

3) Configure and maintain Software Configuration Management (SCM) systems

4) Design and implement CI/CD pipelines for mainframe applications

5) Troubleshoot and resolve technical issues related to mainframe development tools

6) Collaborate with development teams to ensure smooth application delivery

7) Document processes, procedures and system configurations

8) Any other tasks related to software tool administration and maintenance as assigned

Working Experience and Skill Requirement:

1) Minimum 3 years of relevant working experience in technology related to above mentioned software is preferred

2) Hands-on experience with ChangeMan SCM, including configuration management and version control is preferred

3) Proficiency in COBOL, JCL, and DB2

4) Strong knowledge of mainframe development tools and technologies

5) Experience in scripting using REXX, JCL or similar mainframe scripting languages

6) Demonstrated problem-solving and analytical skills

Working Experience And Skill Requirement

In addition to the Mandatory Basic Non Enterprise Server Skill Requirements:

a) Must have at least two (2) years’ post graduate hands on experience in setting up and administration of Linux OS (such as Redhat Linux and Suse Linux) and server;

b) Must have two (2) years’ working experience in applying Linux patches, troubleshooting Linux server issues and upgrading of Server OS;

c) Must have one (1) year working experience with VM including cloning, taking snapshots;

d) Must be willing to pick up skills in basic networking and configuration of network switches as well as server services ie file transfer etc.

Job Description

a) Install, set up, administer Linux servers and server-related services / modules;

b) Troubleshoot issues related to Linux Operating Systems;

c) Prepare and set up testing and production environment;

d) Prepare, carry out and document testing scenarios and da

e) Prepare and maintain system documentation;

f) Produce deliverables according to Group standards and procedures;

g) Assist Project Leaders in the study and design of application systems and work coordination, project management and user training work;

h) Troubleshooting and supporting end-users in the implementation and maintenance of systems;

i) Train other contract programmers in the relevant skills;

j) Participate in Disaster Recovery activities eg simulation exercise at Disaster Recovery sites;

k) Learn / pick up new tools related to the administration and monitoring of the System;

l) Maintenance of servers / systems as assigned by the supervisors;

m) Any other tasks related to Server Administration and Maintenance as assigned by the supervisors.

Responsibilities

a) To manage and to run the Data Centre operations team on a 24x7 basis to ensure both facilities, IT infrastructure and business applications are operational

• Monitor Server and application health

• Support level 1 troubleshooting and recovery

• Run batch jobs & monitoring

• Run backup job & monitoring

• Support Production job deployment and Job schedule

b) Accompany & direct Data Centre visitor

c) Support Disaster Recovery activity

d) Ensure all IT related issues are well documented and update management on overall performance status and activities within Data Centre

You will be involved in monitoring the performance and availability of IT services, processing of production jobs, assisting in monitoring and resolution of incidents related to computer hardware, operating system, application systems, data centre facilities and managing the security of the data centre. Supervise service vendors to ensure full compliance to Service Level agreement.

You will also be involved in process improvement initiatives and projects for the data centre.

Requirements

a) Ability to effectively respond to all issues, complex enquiries or complaints from Project Leaders, users and/or higher management

b) Knowledge in Data Centre/Critical Services management

c) Knowledge in security, fire and workplace safety

d) Excellent interpersonal and communicative skills and be a team player

e) Perform other job-related duties or special projects as assigned

f) Preferably certification in ITIL or good understanding of ITIL framework and practices

g) Minimum NITEC IT / Higher NITEC IT qualification

h) Able to work in shift as Data Centre operates 24/7. Each shift is of 12 hours

i) (Day shift 8.45 am to 8.45 pm, Night Shift: 8:45 pm to 8:45am)

h) Deployment of production files and scheduling of Batch Jobs

We are seeking a qualified Network Automation Engineerwith at least 5 years of hands‑on experience in enterprise networking, networkautomation, and SDN technologies. The ideal candidate will design, develop,validate, and maintain automation solutions that adhere to industry bestpractices—spanning Cisco NX‑OS/Catalyst platforms.

This role requires expertise in automation frameworks,scripting, network provisioning, troubleshooting workflows, and NX‑OS/Catalystoperational tooling.

Key Responsibilities

Network Automation &Development

• Design, build, and maintain network automation frameworks to streamline provisioning, configuration, compliance, and lifecycle operations.
• Develop automation using Python, Ansible, REST/NETCONF/NMI APIs, and YAML.
• Implement Infrastructure‑as‑Code using:
• Ansible Tower / AWX
• GitLab repositories
• Azure DevOps CI/CD pipelines

CyberArk Vault for secure credential and secrets handling.

• Establish coding standards, documentation practices, and reusable automation modules.

Architecture, Governance & Best Practices

• Translate business requirements into scalable network automation architecture.
• Define automation governance, templates, naming standards, and deployment guidelines.
• Conduct code reviews and enforce security, compliance, and audit rules.
• Recommend enhancements and assess emerging technologies.

Experience in the following Network automation:

NX‑OS & Catalyst Deployment

• Provision devices using provided templates:
• Interfaces, VLANs, IPs, hardening constructs
• HSRP, LACP port‑channels
• ACLs
• Static & dynamic routing (OSPF/BGP)
• Perform automated validation and compliance checks.

Network Health Monitoring, Logs & Troubleshooting

• Automated health checks (fabric topology, devicestatus, endpoint connectivity).
• Fault detection & remediation for NX-OS/Catalyst
• Collect diagnostic logs & performance data for RCA.
• Automate network devices backup with version control.

Required Qualifications

• At least 5 years of enterprise networking & automation experience.
• Proficiency with:
• Ansible, YAML, Python
• Ansible Tower / AWX
• GitLab version control
• Azure DevOps CI/CD pipelines
• CyberArk Vault
• Deep expertise in:

• Cisco NX‑OS, Cisco Catalyst

  Layer 2/3 technologies including OSPF, BGP, VXLAN, EVPN, STP, HSRP, LACP, ACLs

• APIs (REST, NETCONF, gNMI), YANG models
• Hands-on in automation validation and test-driven deployment.

Preferred Qualifications

• Cisco CCNP, CCIE Professional
• Red Hat Ansible Tower / Terraform Certified (optional)
• Cloud experience (AWS/Azure) (optional)

Soft Skills

• Good communication and technical documentation skills
• Analytical and detail-oriented

Key Responsibilities

a.      Design, develop, and maintain Terraform modules and configurations for AWS infrastructure provisioning, ensuring reusability, scalability, and adherence to best practices.

b.      Collaborate with application, security, and other internal teams to translate business requirements into robust Terraform-based infrastructure solutions.

c.       Implement and manage AWS Landing Zones using Terraform, establishing standardised, secure, and compliant multi-account environments.

d.      Drive continuous improvement and optimisation of cloud infrastructure through advanced Terraform automation, ensuring high availability, performance, and cost efficiency.

e.      Develop and maintain Terraform state management strategies, including remote state backends, state locking, and disaster recovery procedures.

f.        Implement comprehensive infrastructure security controls and compliance requirements through Terraform code, following AWS security best practices and regulatory standards.

g.       Create and maintain detailed documentation, coding standards, and reusable Terraform modules for cloud infrastructure components.

h.      Provide technical leadership and mentorship on Terraform best practices, code reviews, and infrastructure design patterns.

i.        Troubleshoot complex Terraform deployments and AWS infrastructure issues, implementing solutions that prevent recurrence.

j.        Stay current with Terraform updates, AWS service developments, and emerging infrastructure as code practices.

What we are looking for

k.       Bachelor's degree in Computer Science, Engineering, or a related field; or equivalent work experience.

l.        Minimum 7+ years of hands-on experience with Terraform, including advanced features such as modules, workspaces, providers, and state management.

m.    Deep expertise in AWS services and architecture, including but not limited to EC2, VPC, IAM, S3, RDS, Lambda, CloudFormation, and AWS Organizations.

n.       Proven experience implementing AWS Landing Zones and multi-account strategies using Terraform.

o.       Strong proficiency in scripting languages, particularly Python and Bash, for automation and integration with Terraform workflows.

p.      Comprehensive understanding of AWS security services, compliance frameworks, and infrastructure security best practices.

q.      Experience with CI/CD pipelines for infrastructure deployment, including tools like GitLab CI, Jenkins, or AWS CodePipeline.

r.       Excellent problem-solving skills with the ability to debug complex infrastructure issues and optimise Terraform code for performance.

s.       Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams and explain technical concepts to stakeholders at all levels.

Responsibilities:

Endpoint Protection

·      Administer, operate, and maintain Symantec Endpoint Protection Manager or Defender or any other end point security solution.

·      Deploy, configure, and manage endpoint protection policies, including anti-malware, IPS, firewall, and device control

·      Generate security posture reports regularly to identify gaps in protection and manage the end-to-end lifecycle of the Symantec agent.

·      Perform upgrades and roll outs during weekend maintenance window

User Support & Operations

·      Provide Level 2 / Level 3support for incidents and service requests

·      Monitor endpoint security alerts, investigate incidents, and perform root cause analysis

IT Service Management

·      Understands ITIL processes for Incident, Problem, Change Management

·      Create and update tickets with detailed documentation and resolution steps

·      Maintain SLAs and ensure timely ticket resolution

Documentation & Knowledge Management

·      Create and maintain technical documentation, knowledge articles, and standard operating procedures (SOPs)

·      Maintain runbooks for common operational tasks

Required skills and qualifications:

·      Singaporeans By Birth Only(Public Sector Client)

·      A degree in Computer Science, Information Technology, IT Security or a related field with at least 2-4 yearsof work experience

·      At least 1 year of experience with SEPM / Defender

·      Experience with Host Intrusion Prevention & Detection (HIPS / HIDS)

·      Experience with Windows and/or Linux (RedHat) system administration

·      Able to prioritize multiple tasks in a dynamic working environment, with strong communication and interpersonal skills

Preferred skills and qualifications:

·      Knowledge of Microsoft Defender is a bonus

·      Experience with scripting programming languages (e.g. PowerShell, Python) for automation.