Automation and DevSecOps Engineer 1

NETS; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

BCS Technology Division is seeking an experienced Automation and DevSecOps Engineer to design, build, and operate secure, scalable software delivery pipelines and platform operations.

The incumbent will collaborate with platform, operations, and cross-functional teams to automate delivery, strengthen security, and drive AI-enabled innovations across the organization, balancing BAU work with strategic improvements.

Qualifications

• Good understanding of DevSecOps principles.
• Hands-on experience with CI/CD tooling such as Jira, Jenkins, Bitbucket, Ansible, AWS Code Pipeline, AWS CodeCommit.
• Refining DevSecOps flow for seamless CI/CD pipelines and strong security integration.

Responsibilities

• Design, build, and maintain end-to-end CI/CD pipelines for application deployments.
• Automate build, test, security scanning, packaging, and deployment workflows across multiple environments.
• Embed security and quality controls into CI/CD pipelines, including SAST, SCA, and code quality checks.
• Collaborate with Security, Risk, and Compliance to meet regulatory requirements.

Skills

DevSecOps

CI/CD Tools

Python

Shell Scripting

Kubernetes

Security Automation

Terraform

AWS

Communication

Education

Bachelor’s degree in information technology, Information Systems, Computer Science, or a related field

Tools

Jira

Jenkins

Bitbucket

Ansible

JFrog Artifactory

Sonatype Nexus

SonarQube

Fortify

AWS CodePipeline

AWS CodeCommit

Job description

The Technology Division at BCS is responsible for the operations, maintenance, and support of BCS applications such as FAST, Giro, CTS, PayNow, SGQR, TFR, eGIRO and its critical infrastructure, ensuring its operational stability, regulatory compliance, and service reliability.

We are seeking an experience and hands-on Automation and DevSecOps Engineer to design, build, and operate secure, scalable, and automated software delivery pipelines and platform operations.

The incumbent will work closely with platform, operations, application, and cross-functional teams to design and deliver automation solutions that enhance efficiency, reliability, and security across the organization. This role encompasses both BAU operations and project-based initiatives, requiring the ability to balance operational support with continuous improvement and delivery.

This role also embraces AI-driven innovation, including the use of LLMs, intelligent automation, and agentic AI, to improve operational efficiency, reduce operational toil, strengthen security posture, and enable scalable, self-service platforms.

Key Responsibilities

• Good understanding of DevSecOps principles.
• Design, build, and maintain end-to-end CI/CD pipelines for application deployments.
• Hands-on experience with CI/CD tooling such as Jira, Jenkins, Bitbucket, Ansible, AWS Code Pipeline, AWS CodeCommit.
• Automate build, test, security scanning, packaging, and deployment workflows across multiple environments.
• Develop and maintain reusable pipeline templates and automation frameworks to standardize delivery practices.
• Continuously improve delivery speed, reliability, quality, and developer experience through automation and best practices.
• Manage artifacts, binaries, and dependencies using repositories such as JFrog Artifactory and Sonatype Nexus Repository.
• Good understanding of artifact lifecycle management, dependency control, and versioning best practices.
• Embed security and quality controls into CI/CD pipelines, including:
• Static Application Security Testing (SAST) using tools such as Fortify.
• Code quality and secrets scanning using SonarQube.
• Software Composition Analysis (SCA), 3rd party / OSS libraries using Sonatype Nexus.
• Experience in Terraform to build for provisioning, managing and automating cloud infrastructure using Infrastructure as Code (IaC) best practices.
• Knowledge and experience with AWS services (EC2, ECS/EKS, Lambda, IAM, VPC, ALB/NLB, S3, RDS, CodePipeline, CodeBuild, AWS Inspector, CloudWatch, Glue, etc.)
• Collaborate closely with Security, Risk, and Compliance, application teams to meet security standards and regulatory requirements.
• Automate security validations, policy enforcement, guardrails, and audit evidence collection across pipelines and cloud environments.
• Support audit, risk, and compliance activities through repeatable and automated controls.

Automation, Reliability & Operational Excellence

• Design automation with reliability, security, and scalability in mind (idempotency, error handling, retries, rollback).
• Automate manual operational tasks to reduce toil and improve system reliability.
• Implement logging, monitoring, and alerting automation to ensure visibility and maintainability.
• Work together with various teams to identify automation opportunities.
• Proficiency in automation and scripting, particularly using Python and Unix shell scripting.
• Adoption of AI across teams by identifying practical use cases and integrating AI capabilities into everyday workflows to improve productivity, quality and operational efficiency by leveraging AI Assisted tools.
• Identify, prototype, and scale AI-driven solutions that streamline workflows, reduce manual effort, and accelerate delivery.
• Work with multiple teams to promote effective, responsible, and secure usage of AI technologies.

General

• Collaborate with various team, eg. application, infrastructure, security, operations, product, IT Service Management team, IT Governance, Risk & Compliance, or Auditor.
• Handle audit and risk activities from MAS, Group audit, Risk & Compliance, and 3rd party auditor.
• Prepare and update Automation and DevSecOps documentations, knowledgebase, SOP, best practices as required.
• Liaise with vendor to discuss the requirements, solutioning and validating the implementation.

Requirements

Education and Experience

• Bachelor’s degree in information technology, Information Systems, Computer Science, or a related field
• Minimum 3 years of relevant experience in DevSecOps, automation or a related role.

Skills and Knowledge

• Good understanding of automation and DevSecOps principles
• Hands-on experience with CI/CD tools (Bitbucket, Jenkins, Ansible, JFrog, Sonatype Nexus, Sonatype Sonarqube, Fortify, AWS Cloudcommit, AWS Codepipeline)
• Experience in refining DevSecOps overall flow for seamless CI/CD pipeline with CI/CD tools.
• Familiar with AWS cloud environments.
• Scripting and automation skills using Python and Unix Shell Scripting.
• Ability to design scalable, reusable, resilience and secure automation solutions.
• Good understanding or hands-on experience with Kubernetes or microservices containerization.
• Strong troubleshooting skills and ability to translate operational pain points into automation
• Strong communication and stakeholder engagement skills, with the ability to translate complex requirement into a working solution.
• Good sense of ownership, with a high level of commitment to deliver quality outcomes.
• Demonstrated analytical and problem-solving skills, with the ability to identify issues, assess impact, and drive resolution.
• Able to work independently in a fast-paced environment.
• Collaborative team player with strong interpersonal skills.

Preferred Certifications

• Certified Professional in Python Programming
• Red Hat Enterprise Linux Automation with Ansible