DevSecOps Engineer — Cloud Security, CI/CD & IaC

PT IDstar Cipta Teknologi (IDstar); Cikoko; On-site; IDR 420,000,000 - 560,000,000; Full time

Benefits offered by this job

No remote perks listed

Job summary

PT IDstar Cipta Teknologi (IDstar) is an Indonesia-based IT consulting and digital transformation company trusted by enterprise clients across Asia and beyond.

This DevSecOps role designs, implements, and maintains secure CI/CD pipelines, cloud IAM, and IaC using Terraform, Docker, and Kubernetes, while integrating SAST/DAST/SCA and security gates into development workflows.

Candidates with 3+ years in DevOps or DevSecOps and AWS/GCP security knowledge are encouraged to apply.

Qualifications

• 3+ years in DevOps, Cloud Engineering, or DevSecOps.
• Strong knowledge of AWS/GCP cloud security and IAM best practices.
• Hands-on with CI/CD tools (GitLab CI/CD, Jenkins, GitHub Actions).
• Experience with SAST, DAST, SCA, container scanning, and security gates.
• Familiarity with Docker, Kubernetes (EKS/GKE), Terraform, and IaC.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across the SDLC.
• Manage and enhance cloud security configurations (IAM, access controls).
• Support container security and orchestration with Docker and Kubernetes.
• Implement IaC using Terraform and conduct vulnerability assessments.

Skills

DevOps

DevSecOps

Cloud security

IAM best practices

Automation

Troubleshooting

Education

Bachelor's degree in IT/CS/IS

Tools

GitLab CI/CD

Jenkins

GitHub Actions

SAST

DAST

SCA

Docker

Kubernetes

Terraform

OWASP Top 10

SonarQube

Trivy

Burp Suite

Job description

PT IDstar Cipta Teknologi (IDstar) is an Indonesia-based IT consulting and digital transformation company trusted by enterprise clients across Asia and beyond.

This DevSecOps role designs, implements, and maintains secure CI/CD pipelines, cloud IAM, and IaC using Terraform, Docker, and Kubernetes, while integrating SAST/DAST/SCA and security gates into development workflows.

Candidates with 3+ years in DevOps or DevSecOps and AWS/GCP security knowledge are encouraged to apply.