Full Time Head DevOps (Cloud Platform) Jobs, Salary up to MYR 24,800 in CGC Digital Selangor - Maukerja

Job Purpose

CGC Digital builds and runs SME financing platforms on AWS: customer portals, mobile apps, government-facing programme modules and AI-powered services. The Head of DevOps owns the AWS platform, the CI/CD pipelines and the DevOps team, and leads CGC Digital's adoption of AI and agentic engineering, including Amazon Bedrock.

AI-assisted tooling are part of how CGC Digital develops and operates its platforms, working alongside the engineering team You will govern and mature this practice, keep production reliable, secure and cost-efficient, and lead the DevOps team and the Cybersecurity Specialist. This is a hands-on leadership role.

Roles & Responsibilities

1. Team Leadership & People Management

• Lead, mentor and develop the DevOps team. Own performance management, capability building and career development.
• Provide functional oversight to the Cybersecurity Specialist. Keep DevOps and security priorities aligned.
• Plan resourcing across DevOps, infrastructure security and AI enablement work.
• Build a culture of ownership, automation and continuous improvement.

2. DevOps Strategy & Governance

• Own the DevOps and platform roadmap. Align infrastructure investment with business and technology priorities.
• Set and enforce DevOps standards, environment strategy and release governance across all projects.
• Act as the primary point of contact for DevOps and cloud platform matters.

3. AWS Cloud Infrastructure

• Own the design, build and operation of CGC Digital's multi-account AWS organisation: shared services plus Development, SIT, UAT, Staging and Production.
• Run containerised (ECS / Fargate, ECR) and serverless (Lambda, API Gateway, CloudFront, S3, DynamoDB, Cognito) workloads and managed databases (RDS).
• Manage all infrastructure as code (Terraform, CloudFormation or CDK). No manual console changes in Production.
• Own cloud cost management: budgets, tagging, right-sizing and monthly cost reporting.

4. CI/CD & Release Engineering

• Own CI/CD on AWS CodePipeline, CodeBuild and GitHub: build, test, scan and deploy across all environments.
• Enforce quality gates: SonarQube, automated tests (Playwright), dependency and container scanning, and immutable SHA-tagged ECR images.
• Own release approvals and rollback. Make deployments repeatable and predictable.

5. AI & Agentic Engineering Enablement

• Lead adoption of AI coding agents (Claude Code, Amazon Q Developer, GitHub Copilot) across development and operations. Define how agents get scoped credentials, work inside pipelines and are reviewed.
• Own the Amazon Bedrock platform: model access, Bedrock Agents / AgentCore, Knowledge Bases (RAG), Guardrails, invocation logging, quotas and cost controls.
• Govern how AI agents are used in delivery: human review and approval at every gate, with traceability and an audit trail end to end.
• Integrate LLM services (Amazon Bedrock, Anthropic Claude, Google Gemini / Vertex AI, OpenAI) into products through secure, observable and cost-controlled patterns. Manage API keys and spend.
• Build MCP servers, tooling and internal agents that automate DevOps work: incident triage, log analysis, IaC generation and runbook execution.
• Apply AI to operations (AIOps): anomaly detection and intelligent alerting. Measure impact on lead time, MTTR and cost.
• Set the standard for AI-generated code: review, testing, security scanning and licence hygiene.

6. Cloud Networking, Security & DevSecOps

• Own VPC design, security groups, IAM roles and policies, and Service Control Policies together with the Cybersecurity Specialist.
• Enforce secrets management through AWS Systems Manager Parameter Store and Secrets Manager. No secrets in code, buildspecs or images.
• Integrate Orca Security, security scanning, CloudTrail, AWS Config and GuardDuty into pipelines and operations so security is addressed before deployment, not after.
• Support integration between AWS and on-premise or partner systems.

7. Reliability, Incident Management & Troubleshooting

• Own observability (CloudWatch, X-Ray, centralised logging) and service level objectives for all platforms.
• Lead investigation and resolution of infrastructure issues involving:

o API Gateway endpoints and Lambda execution

o ECS tasks and container images

o CloudFront access control

o Cognito and authentication services

• Act as escalation point for major infrastructure and security incidents. Run post-incident reviews and close corrective actions.

8. IT Audit, RMiT Compliance & Reporting

• Participate in internal, external and regulatory IT audits as the accountable owner of infrastructure, DevOps and platform controls.
• Track every audit finding and compliance item to closure. Own the remediation plan, assign owners and report status to management.
• Keep the DevOps team and all platforms fully compliant with CGC IT policies and Bank Negara Malaysia's Risk Management in Technology (RMiT). Embed RMiT requirements into infrastructure standards, pipelines and access controls.
• Maintain architecture, runbooks and DevOps process documentation to a standard fit for audit and for client and government handover.
• Ensure infrastructure meets ISO 27001, NIST, SOC 2 and client audit requirements.
• Report deployment metrics, reliability, cloud cost, AI adoption, audit status and RMiT compliance to senior management monthly.

9. Agile Delivery

• Plan infrastructure and platform work into sprint cycles and take part in cross-team Agile ceremonies.

Qualifications:

• Bachelor's Degree in Computer Science, Software Engineering, Information Technology or a related field.

Certifications (Preferred):

• AWS Certified Solutions Architect – Professional or Associate
• AWS Certified DevOps Engineer – Professional
• AWS Certified AI Practitioner or AWS Certified Machine Learning Engineer – Associate
• ITIL Foundation
• Agile Project Management Foundation

Requirements:

Experience

• 10+ years in software engineering (C#, .NET, PHP, Java, React, SQL), including 3+ years running AWS infrastructure and CI/CD in production.
• 2+ years leading a technical team, including performance management.
• Hands-on delivery with AI coding agents and LLM APIs. Has shipped at least one production workload on Amazon Bedrock or an equivalent LLM platform.
• Experience embedding security into DevOps (IAM governance, cloud security) and delivering in Agile / Scrum teams.
• Experience leading IT audit responses and regulatory compliance in a financial services environment. BNM RMiT experience preferred.
• Application support and vendor management experience.

Knowledge

• AWS core services: ECS / Fargate, ECR, Lambda, API Gateway, CloudFront, S3, DynamoDB, RDS, Cognito, IAM, VPC, CloudWatch.
• CI/CD: AWS CodePipeline, CodeBuild, GitHub Actions, SonarQube, Playwright.
• Infrastructure as Code: Terraform, CloudFormation, CDK.
• Amazon Bedrock: model selection, Agents / AgentCore, Knowledge Bases, Guardrails, pricing and quotas.
• Agentic AI: agent and tool architecture, Model Context Protocol (MCP), RAG, evaluation, guardrails and multi-agent orchestration.
• LLM ecosystem: Anthropic Claude, Google Gemini / Vertex AI, OpenAI. Prompt engineering and cost / latency trade-offs.
• DevSecOps, secrets management and compliance frameworks (ISO 27001, NIST, SOC 2).
• Bank Negara Malaysia RMiT policy: technology risk governance, cloud and third-party risk, access control, change management and audit expectations.
• Serverless and container architecture, database systems and application integration.
• Agile / Scrum and how DevOps fits sprint-based delivery.

Skills/Competencies:

• AWS platform management and cost optimisation.
• CI/CD and release engineering.
• AI engineering: building and operating Bedrock-based and agentic workloads. Running AI coding agents at team scale.
• Infrastructure troubleshooting and incident command.
• Technical decision-making and solution evaluation.
• People leadership: team development, performance management and delegation.
• Strategic thinking: translate business objectives into DevOps, platform and AI roadmaps.
• Budget and vendor management for cloud, AI and tooling costs.
• Change management: lead teams through new tools, processes and priorities.
• Audit management: evidence preparation, findings tracking and remediation to closure.
• Stakeholder communication and technical documentation.

Others:

• Represents DevOps, infrastructure security and AI enablement at leadership level, including risk, performance and roadmap updates to senior stakeholders.
• Balances hands-on technical work with team leadership.
• Curious about emerging AI tools, with the judgement to tell what is production-ready from what is not.

Pay: RM14,900.00 - RM24,800.00 per month

Benefits:

• Dental insurance
• Health insurance
• Maternity leave
• Opportunities for promotion
• Parental leave
• Professional development
• Work from home

Work Location: Hybrid remote in Kelana Jaya