DevSecOps Engineer

We're Hiring: DevSecOps Engineer!

Experience:

• Consultant: 3–5 years

• Senior Consultant: 7+ years
  
  

Role Overview

We are looking for skilled DevSecOps Engineers to design, implement, and maintain secure, cloud-native infrastructure on AWS. The ideal candidates should have strong experience in cloud infrastructure, containerisation, Infrastructure as Code (IaC), CI/CD automation, and cloud security.

• Design, build, and maintain AWS cloud infrastructure across development, staging, and production environments.

• Implement Infrastructure as Code (IaC) using Terraform or equivalent tools.

• Manage containerised environments using Docker and Kubernetes (EKS/ECS).

• Integrate security scanning tools into GitLab CI/CD pipelines.

• Implement cloud security practices, including IAM, network security, encryption, secrets management, and system hardening.

• Set up monitoring, alerting, and observability solutions.

• Support production deployments, troubleshooting, and incident resolution.

• Implement backup, recovery, and disaster recovery procedures.

• Integrate infrastructure with identity and access management solutions.

• Maintain technical documentation and operational runbooks.
  
  

• Define secure cloud infrastructure architecture and security baselines.

• Establish security standards, governance, and best practices.

• Guide and mentor engineering teams on DevSecOps practices.

• Work with security teams on compliance reviews and remediation activities.
  
  

• AWS:Hands-on cloud infrastructure setup and management.

• Infrastructure as Code:Terraform or equivalent.

• Containers:Docker and Kubernetes (EKS).

• CI/CD:Pipeline design, implementation, and maintenance.

• Cloud Security:IAM, encryption, network security, and infrastructure hardening.

• Security Scanning:SAST, dependency, secrets, container image, and IaC scanning tools.

• Observability:Experience with at least one monitoring and observability tool.

• Production Operations:Deployment support, troubleshooting, and incident management.
  
  

• Dynatrace or Datadog.

• GitLab CI/CD.

• ADFS, Active Directory, SAML, OIDC, and identity management.

• Trend Micro security tools.

• Golang, Kotlin, Next.js, and TypeScript.

• Temporal workflow engine.

• OutSystems, Oracle Policy Automation (OPA/OIA), and Sitefinity.

• Singapore Government or public sector project experience.
  
  

• Strong security-first mindset.

• Good problem-solving and troubleshooting skills.

• Clear communication and documentation skills.

• Ability to work collaboratively with development, infrastructure, and security teams.

• Senior Consultant: Strong technical leadership, mentoring, and stakeholder management skills.
  
  

Interested candidates can share their updated resumes.