Lead Cloud Automation & DevSecOps Engineer

DIGITAL BRIGHT TECHNOLOGIES; Kuala Lumpur; On-site; MYR 150,000 - 210,000; Full time

Job summary

DIGITAL BRIGHT TECHNOLOGIES is seeking a Cloud Automation and DevSecOps Engineer to lead the architecture of centralized Terraform modules and secure IaC release pipelines in a non-production AWS environment. The role emphasizes governance, security-first design, and collaboration with stakeholders to balance agility with enterprise-grade security.

The candidate will implement GitOps workflows, establish governance for a landing zone, and drive automation across five core modules while ensuring

Qualifications

• Proficiency in developing centralized Terraform modules for AWS services (EKS, EC2, S3, RDS, ASG).
• Experience in designing secure, IaC-based release pipelines and GitOps workflows.
• Knowledge of AWS security controls, IAM, SCPs, and threat protection.
• Ability to lead technical workshops and translate requirements into governable infrastructure.

Responsibilities

• Architect reusable Terraform modules for core AWS services across the environment.
• Standardize module usage with comprehensive sample code for developers.
• Incorporate minimum security baselines into IaC modules for default compliance.
• Oversee module lifecycle, versioning, and governance via centralized VCS.
• Define DevSecOps pipelines and GitOps strategies for secure, automated releases.
• Lead governance for landing zone setup, SCPs, and account provisioning.

Skills

Terraform

AWS Networking

Containerization

Database & Storage

Job description

DIGITAL BRIGHT TECHNOLOGIES is seeking a Cloud Automation and DevSecOps Engineer to lead the architecture of centralized Terraform modules and secure IaC release pipelines in a non-production AWS environment. The role emphasizes governance, security-first design, and collaboration with stakeholders to balance agility with enterprise-grade security.

The candidate will implement GitOps workflows, establish governance for a landing zone, and drive automation across five core modules while ensuring