SecDevOps Engineer

Matthey; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive Annual Incentive Plan

Employee Assistance Program (Assist)

Paid Volunteering opportunities

Employee recognition programme

Wellbeing programs and campaigns

Job summary

Johnson Matthey in Malaysia is seeking a DevOps/SecDevOps Engineer to embed security, compliance and resilience into cloud platforms, CI/CD pipelines and software delivery processes.

The role focuses on automating provisioning, deployments and monitoring, building self-service tooling, and partnering with engineering and security teams to remediate vulnerabilities across the SDLC.

Qualifications

• Experience in DevOps, SecDevOps, cloud or software engineering environments.
• Working knowledge of Infrastructure as Code tools like Terraform, Bicep or CloudFormation.
• Experience with CI/CD platforms and integrating automated security controls into delivery pipelines.
• Proficiency in scripting or programming languages such as Python, PowerShell, Go or Bash.
• Familiarity with container and cloud-native technologies including Kubernetes, Helm and GitOps practices.
• Understanding of security frameworks, vulnerability management and modern secure engineering principles.

Responsibilities

• Embedding security, compliance and resilience controls into cloud platforms, CI/CD pipelines and software delivery processes.
• Automating infrastructure provisioning, deployments, monitoring and operational activities to improve reliability and efficiency.
• Developing reusable engineering capabilities, including self-service tooling, templates and AI-assisted development guardrails.
• Partnering with engineering, platform and security teams to identify and remediate vulnerabilities across the software development lifecycle.
• Implementing automated security testing, secrets management and policy enforcement within delivery pipelines.
• Supporting incident response, root cause analysis and continuous improvement initiatives to strengthen operational resilience.

Job description

The role:

• Embedding security, compliance and resilience controls into cloud platforms, CI/CD pipelines and software delivery processes.
• Automating infrastructure provisioning, deployments, monitoring and operational activities to improve reliability and efficiency.
• Developing reusable engineering capabilities, including self-service tooling, templates and AI-assisted development guardrails.
• Partnering with engineering, platform and security teams to identify and remediate vulnerabilities across the software development lifecycle.
• Implementing automated security testing, secrets management and policy enforcement within delivery pipelines.
• Supporting incident response, root cause analysis and continuous improvement initiatives to strengthen operational resilience.

Key skills that will help you succeed in this role:

• Experience in DevOps, SecDevOps, cloud, platform or software engineering environments.
• Working knowledge of Infrastructure as Code tools such as Terraform, Bicep or CloudFormation.
• Experience with CI/CD platforms and integrating automated security controls into delivery pipelines.
• Proficiency in scripting or programming languages such as Python, PowerShell, Go or Bash.
• Familiarity with container and cloud-native technologies including Kubernetes, Helm and GitOps practices.
• Understanding of security frameworks, vulnerability management and modern secure engineering principles.

What we offer:

We make sure salaries are fair, competitive and aligned to individual roles, experience and responsibilities. We offer country-specific benefits to support our employees’ wellbeing, in addition to global benefits such as:

• Competitive Annual Incentive Plan
• Employee Assistance Program (Assist)
• Paid Volunteering opportunities
• Employee recognition programme
• Wellbeing programs and campaigns

At JM, inclusivity is central to our values. We create an environment where everyone can thrive, embracing diverse perspectives to tackle challenges and ensure all colleagues feel valued and connected.

For any queries or accessibility requirements, please contact [e-mail]. We will work with you to make suitable adjustments at any stage of the recruitment process. All conversations are confidential, and your feedback is welcome to help us provide an accessible and positive recruitment experience.

Closing date for applications: This job advertisement will be posted for a minimum of 2 weeks, early application is advised.

All applications are carefully considered and your details will be stored on our secure Application Management System. This is used throughout Johnson Matthey for the selection of suitable candidates for our vacancies as they arise. Johnson Matthey respects your privacy and is committed to protecting your personal information.

For more information about how your personal data is used please view our privacy notice: Johnson Matthey Privacy Notice. By applying for this role and creating an account you are agreeing to the notice.

Johnson Matthey Plc is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, marriage or civil partnership, pregnancy or maternity, religion or belief.