DevOps Engineer

NextLabs, Inc.; Malaysia; On-site; MYR 90,000 - 150,000; Full time

Job summary

NextLabs, Inc. is seeking a DevOps Engineer with a strong focus on cloud security and automation in Malaysia. You will collaborate with cross-functional teams to secure AWS, Azure, and GCP environments and implement secure IaC pipelines.

Responsibilities include developing Python-based automation, managing Terraform/CloudFormation/Ansible, and enhancing CSPM and GRC activities. The role emphasizes governance, risk, and compliance within DevOps processes.

Qualifications

• In-depth knowledge of cloud security and DevSecOps practices.
• Experience with CSPM solutions and cloud risk assessments.
• Strong programming skills in Python for automation.
• Hands-on experience with IaC and automation tools.

Responsibilities

• Collaborate with cross-functional teams to secure cloud infrastructure.
• Develop automation scripts and AWS Lambda functions.
• Implement IaC using Terraform, CloudFormation, and Ansible.
• Integrate security into the DevOps pipeline and ensure compliance.
• Perform cloud risk assessments and remediation planning.
• Support incident response and threat detection activities.

Skills

GRC & security compliance

DevSecOps

Cloud platforms (AWS, Azure, GCP)

Python scripting

Containers & Kubernetes

CI/CD tooling (Jenkins, ArgoCD, Bitbuc

Education

Bachelor’s degree in Computer Science, Information Technology, or related field

Tools

Terraform

CloudFormation

Ansible

AWS Lambda

Docker

Kubernetes

Jenkins

ArgoCD

Bitbucket Pipelines

Job description

• Collaborate with cross-functional teams to enhance and secure cloud infrastructure on AWS, Azure, and Kubernetes.
• Participate in real-time project-based training to develop hands-on skills in DevOps practices.
• Learn and implement containerization and orchestration using Kubernetes.
• Assist in designing, developing, and maintaining scripts in Python to automate processes.
• Engage in governance, risk management, and compliance (GRC) activities related to IT security and operations.
• Collaborate with senior team members to assess, identify, and resolve security vulnerabilities.
• Contribute to continuous improvement initiatives and stay updated with emerging trends in DevOps
• Design, implement, and maintain secure, automated infrastructure as code (IaC) solutions using tools such as Terraform, CloudFormation, and Ansible.
• Develop Python-based automation scripts and AWS Lambda functions to streamline and optimize various processes within our cloud infrastructure.
• Collaborate with cross-functional teams to integrate security into the DevOps pipeline, ensuring secure development practices and compliance with industry standards and regulations.
• Work closely with the governance, risk, and compliance (GRC) team to develop Cloud Security Posture Management (CSPM) modules for our company’s GRC portal, enhancing visibility and control over cloud security configurations.
• Conduct cloud risk assessments and compliance audits, identifying potential security vulnerabilities and implementing remediation measures to mitigate risks.
• Stay updated on emerging security threats, industry best practices, and cloud security trends, and recommend proactive measures to enhance our security posture.
• Provide technical expertise and support to internal teams on security-related matters, including incident response, threat detection, and vulnerability management.

Requirements:

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Proven experience as a DevOps Engineer or similar role, with a focus on cloud security and automation.
• Strong proficiency in IaC tools such as Terraform, CloudFormation, and Ansible.
• Advanced programming skills in Python, with hands-on experience developing automation scripts and AWS Lambda functions.
• In-depth understanding of cloud computing platforms (e.g., AWS, Azure, GCP) and cloud security best practices.
• Experience with implementing and managing CSPM solutions for cloud environments.
• Knowledge of regulatory compliance standards (e.g., SOC2, CIS, CIS RAM) and experience with conducting compliance audits.
• Excellent communication skills and ability to collaborate effectively with cross-functional teams.
• Certifications such as AWS Certified Security – Specialty, Certified Cloud Security Professional (CCSP), or equivalent are a plus

Skills:

• Eagerness to contribute to GRC tasks and security compliance activities.
• Proficient in AWS and Azure cloud platforms with hands-on experience.
• Understanding of DevSecOps principles and practices.
• Previous experience or coursework in cybersecurity is advantageous.
• Familiarity and hands-on experience with containerization technologies such as Docker and orchestration tools like Kubernetes.
• Experience with Jenkins, ArgoCD, and Bitbucket Pipelines.