DevSecOps Engineer

About the role

You'll join an integrated delivery team working on a Singapore public sector analytics platform for transport operations. The platform brings together fleet, device and operational data, and it is growing into predictive maintenance and AI‑enabled insights. You'll design, automate and maintain secure, scalable infrastructure and deployment pipelines, working alongside the client's in‑house engineers.

What you'll do

• Build automation to deploy, manage, monitor and maintain applications and infrastructure
• Design and maintain CI/CD pipelines for build, test, integration and release
• Implement infrastructure as code and environment automation
• Manage AWS cloud resources and platform services
• Monitor and improve platform availability, performance and reliability
• Put security controls in place and keep them compliant with government security requirements
• Plan and monitor security architecture, including threat and risk assessments
• Run vulnerability assessments, system hardening, security reviews and remediation
• Set up disaster recovery, backup and business continuity
• Troubleshoot system, application and infrastructure issues
• Work with developers to build security into every stage of the SDLC

What you'll bring

• Solid grounding in SDLC, CI/CD, TDD and DevSecOps practices
• Hands‑on experience designing, deploying and supporting cloud‑native workloads on AWS, including IAM, networking, monitoring, container platforms and security services
• Proficiency in at least two of Bash, PowerShell, Python, JavaScript or Java
• Infrastructure as code with Terraform, Ansible or equivalent
• Docker and Kubernetes
• GitLab workflows and CI/CD platforms
• Monitoring, logging and observability tooling
• Application and cloud security knowledge, including vulnerability management and hardening
• Strong troubleshooting and incident response skills

Good to have

• Experience with the Government Commercial Cloud (GCC) or other Singapore government environments
• CNCF tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper and Crossplane
• Security and secrets tools such as HashiCorp Vault, Tenable, Fortify and Sonatype Nexus IQ
• Experience in regulated industries

Details

• Singapore based, working onsite at the client's office
• Must be based in Singapore with the right to work here
• Must be available to start in October 2026
• To apply, send your CV with your notice period and a short note on your AWS and security experience