Senior Cloud DevSecOps Architect

GoKardz Technologies; Kuala Lumpur; On-site; MYR 120,000 - 160,000; Full time

Job summary

GoKardz Technologies in Kuala Lumpur is seeking a Senior Cloud DevSecOps Architect to design and implement cloud security solutions. The role requires a strong understanding of Malaysia and Singapore's cloud security requirements, as well as hands-on experience in multi-cloud architecture implementation.

The ideal candidate will lead the automation of security controls and contribute to improving DevSecOps maturity within a global banking organization through a multi-phased approach.

Qualifications

• Deep understanding of cloud security requirements and compliance standards in Malaysia and Singapore.
• Experience in designing and implementing multi-cloud landing zones.
• Proficient in automation strategies using IaC tools.

Responsibilities

• Design and implement cloud security solutions and architecture.
• Lead automation of security scans and testing controls in CI/CD pipeline.
• Improve DevSecOps maturity across global banking organizations.

Skills

Cloud security requirements knowledge

Infrastructure as Code (IaC)

Multi-cloud architecture design

DevSecOps practices

Automation strategies

Job description

Senior Cloud DevSecOps Architect

Cloud Security Solutioning

• Understand Malaysia and Singapore FSI cloud security requirements and compliance standards.
• Able to design and hands‑on implementation of multi‑cloud landing zone architecture and scalable security services. (primary: AWS & Outpost, secondary: Azure & HCI Stack ARC)
• Able to design and hands‑on implementation of the automation strategy using Infrastructure as Code (IaC) tools both cloud‑native and on‑premise tools
• Create a detailed design document outlining the architecture components and their integration and lead the implementation
• Design and hands‑on implementation of the cloud‑native security tools across policing controls, IAM, infrastructure - network ACL, keys & server/workload runtime protection, encryption, logging and monitoring, and incident response/remediation automation

Devsecops

• Design and hands‑on implementation of automated security scan and testing controls - SAST DAST SCA Secret IAST RASP etc over CI/CD pipeline at both cloud and on‑premise setting
• Technically competent in devsecops domain and able to lead the change in uplifting devsecops maturity across global banking organisation by implementing all the necessary capability in multi‑phased approach