DevSecOps Lead – AWS Cloud Security & Automation

Nufarm; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Nufarm is seeking an experienced DevSecOps Lead to join the APAC IT team, based in Malaysia or Indonesia. The role leads the design, security, automation, and operational excellence of AWS-native integration and data platforms, driving secure-by-design pipelines and resilient cloud services.

You will mentor engineers, collaborate with regional/global teams, and shape cloud security capabilities while implementing IAM controls, encryption, and threat-detection across the estate.

Qualifications

• 10+ years in IT with strong DevOps/DevSecOps background.
• Experience leading and mentoring engineers in cloud/platform environments.
• Hands-on AWS-native integration design and implementation.

Responsibilities

• Design, build, and secure serverless integration solutions on AWS services.
• Implement fine-grained IAM access controls and security best practices.
• Secure data in transit and at rest using KMS/TLS.
• Strengthen APIs and integration services with authentication and rate limiting.
• Build and maintain CI/CD pipelines with CodePipeline/CodeBuild.
• Embed security into software delivery pipelines for secure-by-design deployment.
• Establish observability and threat-detection across integration platforms.
• Lead incident response for integration, cloud, and data security events.
• Mentor DevSecOps engineers and scale capability across org.

Skills

DevSecOps

Cloud security

AWS-native

Terraform

IaC

CI/CD pipelines

Incident response

Leadership

Python/Scripting

Education

Bachelor's degree in CS/IT/SE

Tools

Terraform

AWS CDK

CodePipeline

Jenkins

GitLab

Job description

Nufarm is seeking an experienced DevSecOps Lead to join the APAC IT team, based in Malaysia or Indonesia. The role leads the design, security, automation, and operational excellence of AWS-native integration and data platforms, driving secure-by-design pipelines and resilient cloud services.

You will mentor engineers, collaborate with regional/global teams, and shape cloud security capabilities while implementing IAM controls, encryption, and threat-detection across the estate.