DevSecOps

PT IDstar Cipta Teknologi (IDstar); Cikoko; On-site; IDR 420,000,000 - 560,000,000; Full time

Benefits offered by this job

No remote perks listed

Job summary

PT IDstar Cipta Teknologi (IDstar) is an Indonesia-based IT consulting and digital transformation company trusted by enterprise clients across Asia and beyond.

This DevSecOps role designs, implements, and maintains secure CI/CD pipelines, cloud IAM, and IaC using Terraform, Docker, and Kubernetes, while integrating SAST/DAST/SCA and security gates into development workflows.

Candidates with 3+ years in DevOps or DevSecOps and AWS/GCP security knowledge are encouraged to apply.

Qualifications

• 3+ years in DevOps, Cloud Engineering, or DevSecOps.
• Strong knowledge of AWS/GCP cloud security and IAM best practices.
• Hands-on with CI/CD tools (GitLab CI/CD, Jenkins, GitHub Actions).
• Experience with SAST, DAST, SCA, container scanning, and security gates.
• Familiarity with Docker, Kubernetes (EKS/GKE), Terraform, and IaC.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across the SDLC.
• Manage and enhance cloud security configurations (IAM, access controls).
• Support container security and orchestration with Docker and Kubernetes.
• Implement IaC using Terraform and conduct vulnerability assessments.

Skills

DevOps

DevSecOps

Cloud security

IAM best practices

Automation

Troubleshooting

Education

Bachelor's degree in IT/CS/IS

Tools

GitLab CI/CD

Jenkins

GitHub Actions

SAST

DAST

SCA

Docker

Kubernetes

Terraform

OWASP Top 10

SonarQube

Trivy

Burp Suite

Job description

PT IDstar Cipta Teknologi (IDstar) is an Indonesia-based IT consulting and digital transformation company, trusted by over 30 enterprise clients across Asia, Oceania, North America, and Africa. Supported by ISO 9001 and ISO 27001 certifications, IDstar has delivered more than 1,000 successful projects by combining strong local insight with global execution standards. With a network of over 900 pre-screened IT professionals and partnerships with leading technology providers such as UiPath, IBM, and Josys, the company focuses on IT talent solutions, Intelligent Automation (RPA), and SaaS support. IDstar is well-reviewed on platforms including GoodFirms and Glassdoor, reflecting its commitment to smart, secure, and future-ready digital transformation. The company promotes a collaborative, growth-oriented environment for technology professionals who want to contribute to impactful innovation.

Responsibilities:

• Design, implement, and maintain secure CI/CD pipelines to integrate security practices throughout the software development lifecycle.
• Implement and manage security testing tools, including SAST, DAST, Software Composition Analysis (SCA), and container scanning.
• Integrate automated security checks and security gates into CI/CD pipelines.
• Manage and enhance cloud security configurations, including IAM policies and access controls across AWS/GCP environments.
• Support container security and orchestration using Docker and Kubernetes (EKS/GKE).
• Implement and maintain Infrastructure as Code (IaC) using Terraform.
• Conduct vulnerability assessments, identify security risks, and support vulnerability remediation.
• Collaborate with development, infrastructure, and security teams to ensure secure application delivery and deployment.

Requirements:

• Bachelor's degree (S1) in Information Technology, Computer Science, Information Systems, or a related field.
• Minimum 3 years of experience in DevOps, Cloud Engineering, or DevSecOps.
• Strong knowledge of AWS/GCP cloud security and IAM best practices.
• Hands-on experience with CI/CD tools such as GitLab CI/CD, Jenkins, or GitHub Actions.
• Experience implementing SAST, DAST, SCA, container scanning, and security gates.
• Familiarity with Docker, Kubernetes (EKS/GKE), Terraform, and Infrastructure as Code (IaC).
• Knowledge of OWASP Top 10, vulnerability management, and secure coding practices.
• Hands-on experience with security tools such as SonarQube, Trivy, Burp Suite, or equivalent tools.
• Strong troubleshooting, automation, and collaboration skills.
• AWS or GCP certification is a plus.
• Short notice period or no notice period (available to join immediately).