DevOps Engineer — Senang.io

Senang.io; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Job summary

Senang.io in Kuala Lumpur is seeking a hands-on DevOps/SRE to own and run our cloud infrastructure end-to-end, focusing on reliability and observability. You will complete the in-progress monitoring stack consolidation and ensure production systems run smoothly with on-call responsibility.

You will manage AKS/Kubernetes, MySQL, Azure Firewall Premium, Application Gateway WAF V2, Defender, and Azure Monitor; advance the SIEM from PoC to production; oversee FusionAuth and on-call rotation, and

Qualifications

• 4–6 years in a DevOps/SRE role with production ownership
• Hands-on Azure experience preferred; AWS/GCP acceptable if willing to convert
• Experience taking monitoring tools or SIEM from PoC to production
• Comfortable owning a live production environment with on-call duties

Responsibilities

• Own Azure infrastructure day-to-day: AKS/Kubernetes, MySQL, Azure Firewall Premium, Application Gateway WAF V2, Defender, Azure Monitor
• Finish consolidating the monitoring stack into a single Grafana dashboard with tiered alerts
• Take the SIEM from proof-of-concept to fully operational
• Manage FusionAuth, Power Automate flows, JIRA-tracked infra work, and PagerDuty on-call rotation

Skills

Kubernetes

Azure

Observability

SIEM

On-call

Terraform

FusionAuth

JIRA

PagerDuty

Networking

Tools

AKS

Azure Monitor

ELK

Prometheus Grafana

Wazuh

SonarQube

Uptime Kuma

FusionAuth

JIRA

PagerDuty

Job description

Location: Kuala Lumpur (or remote with regular on-site)

Works closely with: CISO (independent function — you'll support their evidence and control requests, not own them)

Role Summary

Reports to: CEO/ HEAD OF ENGINEERING

Location: Kuala Lumpur (or remote with regular on-site)

Works closely with: CISO (independent function — you'll support their evidence and control requests, not own them)

Role Summary

Own and run Senang.io's cloud infrastructure and production operations end-to-end, including completing the in-progress monitoring stack consolidation. This is a hands‑on execution role focused on infrastructure reliability and observability — not a security‑policy or compliance‑ownership role.

Key Responsibilities

• Own Azure infrastructure day-to-day: AKS/Kubernetes, MySQL, Azure Firewall Premium, Application Gateway WAF V2, Microsoft Defender, Azure Monitor
• Finish consolidating the monitoring stack (Kibana/ELK, Prometheus, Grafana, Uptime Kuma, Wazuh, SonarQube) into a single Grafana dashboard with tiered alerting; clear the stalled integration tickets
• Take the SIEM from proof-of-concept to fully operational
• Manage FusionAuth, Power Automate flows, JIRA-tracked infra work, and PagerDuty on-call rotation
• Execute incident response (detect, contain, remediate, escal… ) — policy and post‑incident reporting sit with the CISO
• Provide technical documentation and evidence (configs, logs, change records) when the CISO or an external auditor requests it — you're the source of truth on the systems, not the one interpreting regulatory requirements

Required Experience

• 4–6 years in a DevOps/infrastructure/SRE role, with real production ownership (not just project-based cloud work)
• Hands‑on Azure experience is strongly preferred; solid AWS/GCP experience is acceptable if willing to convert
• Has taken at least one monitoring tool or SIEM from setup/POC through to production use
• Comfortable owning a live production environment with genuine on‑call responsibility

Must‑Know Technical Areas

• Kubernetes (AKS or equivalent) — deployments, scaling, troubleshooting at a working level
• Cloud networking and security groups/firewalls (Azure Firewall, WAF, or equivalent)
• At least one observability stack (ELK, Prometheus/Grafana, or similar) configured from scratch, not just dashboards inherited from someone else
• Infrastructure‑as‑code basics (Terraform, ARM/Bicep, or equivalent)
• Identity/auth systems (FusionAuth, Auth0, Keycloak, or similar)

Nice‑to‑Have (not required)

• Exposure to a regulated industry (banking, insurance, fintech) — helpful context, not a filter
• Any BNM RMiT / MAS TRM / ISO 27001 familiarity — bonus, but the CISO covers this
• CKA or similar certification