IT Infrastructure & Security Engineer

**About Whalet** Whalet is a cross-border payments company building its international headquarters in Singapore. As a Payment Service Provider regulated by the Monetary Authority of Singapore (MAS), we are setting up a local technology team to run and secure the infrastructure behind our payment services across Asia Pacific and beyond. **The Role** We are looking for a hands-on engineer with around five years of experience to run our Singapore cloud infrastructure and own its day-to-day security. You will be one of the first members of the local technology team, working closely with our group technology team in China and with Compliance and Risk to keep our platform reliable, secure and inspection-ready. This is an opportunity to help build a regulated payments technology environment from the ground up, with real ownership and room to grow. **Key Responsibilities** *Infrastructure & Reliability* * Deploy, operate and improve our Singapore cloud environment (compute, network, databases, storage), ensuring high availability and performance for payment workloads * Build and maintain monitoring, alerting, logging and capacity management; define and track service level objectives * Automate infrastructure and releases using Infrastructure-as-Code and CI/CD pipelines * Apply change management, release review and rollback discipline to protect production *Security Operations & Compliance* * Implement and maintain security baselines, patching, endpoint protection/EDR and vulnerability scanning; coordinate periodic penetration tests and track remediation * Manage identity and access, including privileged access, least privilege and segregation of duties * Operate security monitoring (SIEM) and respond to security incidents, including regular exercises * Implement technical controls aligned with the MAS Technology Risk Management Guidelines and Notices on Technology Risk Management and Cyber Hygiene, and with PDPA requirements * Prepare and maintain security policies, procedures and evidence to support internal audits, external audits and MAS inspections *Resilience & Incident Management* * Maintain Business Continuity and Disaster Recovery arrangements and run regular recovery tests * Support incident escalation and regulatory incident reporting within MAS timelines *Third Parties & Collaboration* * Support due diligence and ongoing monitoring of cloud providers and other technology vendors, in line with MAS outsourcing and third-party risk expectations * Work with the China HQ technology team to apply group standards while meeting Singapore requirements, and with Compliance and Risk on technology risk reviews before new features go live **Requirements** *Essential* * Bachelor's degree in Computer Science, Information Technology, Information Security or a related field * 4–6 years' experience in infrastructure, DevOps, SRE or security engineering, including running production systems * Hands-on experience with AWS (or an equivalent major cloud) and containerised workloads on Kubernetes * Experience with Terraform, Ansible or similar IaC tools and CI/CD pipelines * Solid Linux and networking fundamentals (VPC, firewalls, load balancing, WAF) and experience operating relational databases and Redis * Experience with monitoring and observability tools such as Prometheus, Grafana or Datadog * Practical security operations experience: SIEM, EDR, vulnerability management and incident response * Exposure to a regulated or audited environment (for example MAS TRM, ISO 27001, SOC 2 or PCI DSS), including preparing documentation and evidence * Fluent English and Mandarin; willingness to participate in an on-call rotation *Strongly Preferred* * Experience supporting payment systems in production, such as cross-border remittance, ewallets, card processing or FAST/PayNow * Prior experience at an MAS-licensed financial institution or payments company, including MAS inspections * Experience setting up infrastructure and controls in an early-stage or fast-growing environment *Nice to Have* * Certifications such as AWS, CKA/CKS, Security+, CISSP, CISM or OSCP *Personal Attributes* * Ownership mindset and composure under pressure * Self-driven and comfortable working across time zones and cultures **How to Apply** Please submit your CV and a brief cover note to **vivsiabl@gmail.com**