DevSecOps Engineer

Thales Group; Otago; On-site; SGD 120,000 - 190,000; Full time

Job summary

Thales Group in Singapore is seeking a senior DevOps/SRE professional to build and maintain CI/CD pipelines, provision and manage multiple environments, and apply IaC across Kubernetes-based stacks. You will implement secure, observable, and resilient cloud/on-prem infrastructures while coaching teams in DevSecOps practices.

You will collaborate with system architects and RTEs, drive automation, and ensure compliance and rapid delivery through Lean-Agile methodologies.

Qualifications

• Strong expertise in Linux Operating System, including subsystems and filesystems.
• Strong expertise in Linux shell scripting (bash).
• Experience designing and deploying CI pipelines for software teams.
• Strong expertise in Secrets Management and Configuration Management within Kubernetes.
• Experience designing and securing OCI containerized workloads (Docker, Kaniko) in Kubernetes on-prem and cloud.
• Proactive monitoring and observability using OTEL; incident response.
• Experience in data center or mission-critical environments a plus.
• Lead teams in adopting DevSecOps Mindset and secure development practices.
• Experience in multicultural, multidisciplinary environments.
• Excellent English communication skills.

Responsibilities

• Build and maintain CI/CD pipelines to support Agile teams and ARTs.
• Provision and manage dev/test/staging/prod environments.
• Use IaC tools (Terraform, Helmfile, Ansible, Kubernetes manifests) for reproducibility and compliance.
• Ensure high availability and resilience in cloud and on-prem environments (zero-downtime, blue/green, canary).
• Manage automation and toolchain for code quality, security scanning, release management, and monitoring; streamline workflows per Lean-Agile principles.
• Collaborate with System Architects, RTEs and agile teams on delivery practices.
• Provide DevOps coaching on version control, branching, and automated testing.
• Support PI planning with ready environments and pipelines.
• Incorporate security practices (Secrets Management) into CI to ensure premium artefacts (shift-left security).
• Automate compliance checks and enforce policies (code signing, container scanning).
• Develop observability practices (monitoring/logging/traces) to track deployment frequency and MTTR.
• Collaborate with InfoSec and Compliance on security audits and risk assessments.
• Contribute to disaster recovery planning and testing.

Skills

Linux OS

Linux shell scripting

CI/CD pipelines design

DevSecOps mindset

Agile teamwork

Communication in English

Multi-cultural teamwork

Education

Bachelor's in Computer Science or Information Technology

Recognized Engineering degree

Tools

Kubernetes

Docker

Terraform

Helmfile

Ansible

Kaniko

Job description

Responsibilities

• Build and maintain CI/CD pipelines that support Agile teams and ARTs.
• Provision and manage environments (development, test, staging, production).
• Use infrastructure as Code (IaC) tools (i.e.,Terraform,Helmfile,Ansible,KubernetesManifests) to ensure re-producibility and compliance.
• Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies)
• Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles.
• Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices.
• Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing.
• Support Program Increment (PI) planning by ensuring environments and pipelines is ready.
• Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of the premium quality level (shift-left security).
• Automate compliance checks and enforce policies (e.g.,code signing, container scanning).
• Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR.
• Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.
• Contribute to disaster recovery planning and testing.

Work in an agile, cross-functional multinational team, actively engaging to support the success of the team.

Requirements

Education

Bachelors in Computer Science or Information Technology

Recognized Engineering degree

Essential Skills/Experience

• Strong expertise in Linux Operating System (i.e., Linux Process Sub-systems, Linux FileSystem)
• Strong expertise in Linux shell scripting (i.e., bash scripting)
• Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams
• Strong expertise in Secrets Management and Configuration Management of subsystems in a Container Orchestration Framework, such as Kubernetes.
• Strong expertise in designing, deploying & securing OCI containerized workloads (e.g., Docker, Kaniko) in Container Orchestration Frameworks (e.g., Kubernetes) running on-top of on-premises infrastructure and cloud infrastructure.
• Strong expertise in designing and implementing pro-active monitoring of production grade environments, incident response and allows swift mitigation of security threats.
• Expertise with observability tools like OpenTelemetry (OTEL) for monitoring and instrumentation, ensuring comprehensive visibility into system health and performance in Container Orchestration Frameworks.
• Demonstrated experience in working in data center environments; bonus if you have relevant experience on working in mission critical systems.
• Demonstrated ownership of the DevSecOps Mindset and demonstrated experiences of guiding the Software Development Teams in embracing the DevSecOps Mindset.
• Demonstrated experience in working in a multi-cultural and multi-disciplinary environment.
• Good communication skills in English.

Desirable Skills/Experience

If you have the following desirable skills and relevant experiences, it would be an added advantage!

• Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS).
• Familiarity with popular DevOps tools (e.g., Jenkins, Git, Terraform) to enhance our Kubernetes development pipeline.
• Experience with CI/CD tools and practices integrated with Kubernetes, driving continuous improvement and deployment.
• Familiar with cloud-native deployment strategies to cloud service providers (e.g., Azure Cloud, Amazon Cloud, Google Cloud).
• Familiar with the main cloud service models: Software as a Service, Platform as a Service and Infrastructure as a Service.

Essential / Desirable Traits

Possess learning agility, flexibility and pro-activity

Comfortable with agile teamwork and user engagement