SecDevOps Engineer: Cloud Security, Pipelines & Automation

Johnson Matthey; Kuala Lumpur; On-site; MYR 120,000 - 260,000; Full time

Benefits offered by this job

Competitive Annual Incentive Plan

Employee Assistance Program (Assist)

Paid Volunteering opportunities

Employee recognition programme

Wellbeing programs and campaigns

Job summary

Johnson Matthey in Malaysia is seeking a SecDevOps Engineer to embed security, resilience and automation across cloud platforms and delivery pipelines. You will automate provisioning, monitoring and operational activities while developing reusable tooling and guardrails.

You will collaborate with engineering, platform and security teams to remediate vulnerabilities and implement security testing and secrets management throughout the SDLC.

Qualifications

• Experience in DevOps, SecDevOps and cloud environments.
• Familiarity with IaC tools like Terraform, Bicep or CloudFormation.
• Experience with CI/CD platforms and integrating automated security controls.
• Proficiency in scripting languages such as Python, PowerShell, Go or Bash.
• Familiarity with Kubernetes, Helm and GitOps.

Responsibilities

• Embed security, compliance and resilience into cloud platforms, CI/CD pipelines and software delivery.
• Automate infrastructure provisioning, deployments, monitoring and operations.
• Develop reusable engineering capabilities, including self-service tooling and guardrails.
• Partner with engineering, platform and security teams to remediate vulnerabilities.
• Implement automated security testing, secrets management and policy enforcement.
• Support incident response and continuous improvement to strengthen resilience.

Skills

DevOps

SecDevOps

Cloud

Platform engineering

Software engineering

Tools

Terraform

Bicep

CloudFormation

CI/CD platforms

Kubernetes

Helm

GitOps

Python

PowerShell

Go

Bash

Job description

Johnson Matthey in Malaysia is seeking a SecDevOps Engineer to embed security, resilience and automation across cloud platforms and delivery pipelines. You will automate provisioning, monitoring and operational activities while developing reusable tooling and guardrails.

You will collaborate with engineering, platform and security teams to remediate vulnerabilities and implement security testing and secrets management throughout the SDLC.