- Singapore
Working Location
Job Description
Responsibilities
We're Hiring: DevSecOps Engineer!
Experience:
Consultant: 3–5 years
Senior Consultant: 7+ years
Role Overview
We are looking for skilled DevSecOps Engineers to design, implement, and maintain secure, cloud-native infrastructure on AWS. The ideal candidates should have strong experience in cloud infrastructure, containerisation, Infrastructure as Code (IaC), CI/CD automation, and cloud security.
Key ResponsibilitiesDesign, build, and maintain AWS cloud infrastructure across development, staging, and production environments.
Implement Infrastructure as Code (IaC) using Terraform or equivalent tools.
Manage containerised environments using Docker and Kubernetes (EKS/ECS).
Integrate security scanning tools into GitLab CI/CD pipelines.
Implement cloud security practices, including IAM, network security, encryption, secrets management, and system hardening.
Set up monitoring, alerting, and observability solutions.
Support production deployments, troubleshooting, and incident resolution.
Implement backup, recovery, and disaster recovery procedures.
Integrate infrastructure with identity and access management solutions.
Maintain technical documentation and operational runbooks.
Define secure cloud infrastructure architecture and security baselines.
Establish security standards, governance, and best practices.
Guide and mentor engineering teams on DevSecOps practices.
Work with security teams on compliance reviews and remediation activities.
AWS:Hands-on cloud infrastructure setup and management.
Infrastructure as Code:Terraform or equivalent.
Containers:Docker and Kubernetes (EKS).
CI/CD:Pipeline design, implementation, and maintenance.
Cloud Security:IAM, encryption, network security, and infrastructure hardening.
Security Scanning:SAST, dependency, secrets, container image, and IaC scanning tools.
Observability:Experience with at least one monitoring and observability tool.
Production Operations:Deployment support, troubleshooting, and incident management.
Dynatrace or Datadog.
GitLab CI/CD.
ADFS, Active Directory, SAML, OIDC, and identity management.
Trend Micro security tools.
Golang, Kotlin, Next.js, and TypeScript.
Temporal workflow engine.
OutSystems, Oracle Policy Automation (OPA/OIA), and Sitefinity.
Singapore Government or public sector project experience.
Strong security-first mindset.
Good problem-solving and troubleshooting skills.
Clear communication and documentation skills.
Ability to work collaboratively with development, infrastructure, and security teams.
Senior Consultant: Strong technical leadership, mentoring, and stakeholder management skills.
Interested candidates can share their updated resumes.
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.