About the Role
We are seeking a DevSecOps Engineer to drive cloud operations, security automation, observability, and platform engineering initiatives across a modern cloud-native environment. This role will play a key part in strengthening operational excellence, enhancing automation capabilities, and ensuring secure, scalable, and reliable digital services.
You will work closely with product, engineering, infrastructure, and security teams to embed DevSecOps practices, improve cloud operations, and establish reusable platform capabilities that support long-term digital transformation objectives.
Key Responsibilities
Platform Engineering & DevSecOps Enablement
Design, build, implement, and support shared DevSecOps capabilities for digital products and platforms.
Develop reusable platform components and engineering standards.
Integrate observability practices into product delivery.
Maintain supporting documentation, frameworks, and operational controls required for ongoing service delivery and business continuity.
Cloud Operations & Automation
Implement Infrastructure as Code (IaC) and cloud automation solutions.
Automate operational processes and create reusable infrastructure components.
Develop automated workflows for provisioning, configuration, maintenance, and operational support.
Optimise cloud operations to maximise efficiency, consistency, and scalability.
Security Engineering & Compliance
Embed security-by-design principles throughout the application and infrastructure lifecycle.
Integrate automated security validation and compliance controls into CI/CD pipelines.
Strengthen vulnerability management, threat detection, and remediation processes.
Ensure solutions comply with applicable security, governance, and audit requirements.
Infrastructure Reliability & Observability
Support the reliability, performance, and availability of cloud-hosted applications and shared services.
Diagnose and resolve issues across distributed cloud environments.
Implement and maintain: Monitoring frameworks, Service health dashboards, Alerting standards, Operational runbooks, Observability tooling.
Contribute to incident response, problem management, and continual service improvement.
Requirements
Education & Experience
Degree or Diploma in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, or a related discipline.
Relevant experience in DevSecOps, Site Reliability Engineering (SRE), Cloud Platform Engineering, or similar roles.
Experience designing and operating security, automation, and observability solutions within cloud-native environments.
Experience supporting highly regulated environments will be advantageous.
Observability & Monitoring
Experience implementing observability across applications, infrastructure, and cloud services.
Ability to collect and correlate: Metrics, Logs, Traces.
Experience building service health dashboards, alerting frameworks, and supporting root cause analysis.
Familiarity with enterprise observability platforms and monitoring standards.
Cloud Automation & Infrastructure as Code
Strong experience with Infrastructure as Code, configuration management, and cloud automation.
Experience automating: Cloud provisioning, Certificate lifecycle management, Linux patching, Compliance validation, Routine maintenance, Recovery processes.
Ability to build reusable automation modules and operational workflows.
Security & Governance
Experience embedding security controls within cloud platforms and CI/CD pipelines.
Knowledge of: Vulnerability management, Secrets management, Certificate management, Identity and access controls, Security monitoring, Remediation tracking.
Strong understanding of governance, compliance, audit, and risk management requirements.
Technical Skills
Strong scripting and automation skills using: Python, Bash, PowerShell
Hands-on experience with: AWS or other major cloud platforms, Docker, Kubernetes, CI/CD tools, Git-based development workflows, Terraform, Ansible.
Familiarity with: Monitoring and logging platforms, API integrations, Secrets management solutions, Automated testing frameworks.
Company Overview – CMC APAC
CMC APAC Pte. Ltd.
, a member of
CMC Global
under
CMC Corporation,
is a Singapore-based regional hub delivering ICT and digital transformation solutions across the Asia-Pacific region.
As the Asia-Pacific arm of CMC Global, CMC APAC extends the Group’s technological expertise into one of the world’s most dynamic digital markets. Building on a strong foundation as a leading digital transformation (DX) provider in Vietnam, we serve as a strategic hub for delivering AI, Data, Cloud, and next-generation technology solutions across the region.
About CMC Global
CMC Global is a leading technology and AI transformation services provider, serving over 300 global clients across industries such as:
Banking & Financial Services
Healthcare
Manufacturing
Automotive
The company delivers end-to-end solutions in AI, Data, Cloud, and Digital Transformation, supporting enterprises in solving complex business challenges at scale.
Founded in 2017, CMC Global builds upon the long-standing legacy of CMC Corporation (established in 1993), one of Vietnam’s leading technology groups, with a vision to bring Vietnamese ICT solutions to the global market.
Global Presence & Capabilities
With an international network spanning Asia-Pacific, Europe, and North America, CMC Global provides:
24/7 global delivery capability
Strong engineering talent pool
Scalable and cost-effective delivery models
At CMC APAC, we combine global delivery excellence with local market expertise to support enterprises in achieving:
Operational efficiency
Business growth
Sustainable, long-term value
Learn More
CMC APAC: https://cmc-apac.sg/
CMC Global: *************