DevOps Engineer

Tribe; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

AngelHack Developer Labs in Singapore is seeking an experienced DevOps Engineer to design, build, and maintain scalable cloud infrastructure and CI/CD pipelines with a strong AWS/OpenShift focus. You will embed security practices across the lifecycle, treating DevSecOps as essential, not optional.

The role covers IaC, Kubernetes/OpenShift management, and pipeline automation, with an emphasis on security gates, vulnerability scanning, and policy-as-code.

Qualifications

• 3–5 years of relevant DevOps/DevSecOps/Platform Engineering experience.
• Hands-on with AWS (EC2, S3, VPC, IAM, Lambda, RDS, CloudFormation/Terraform).
• Practical experience with Red Hat OpenShift (deployment, cluster management, operators, RBAC).
• Solid understanding of containerization technologies (Docker, Kubernetes).
• Experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, Tekton).
• Working knowledge of security scanning tools (SAST/DAST/SCA — SonarQube, Snyk, Checkmarx, OWASP ZAP).
• Experience with container/image scanning tools (Trivy, Clair, Aqua).
• Familiarity with secrets management tools (Vault, AWS Secrets Manager).
• Proficiency in scripting languages (Bash, Python, or Go).
• Familiarity with configuration management tools (Ansible, Chef, or Puppet).
• Understanding of networking fundamentals (DNS, load balancing, firewalls, VPNs).
• Experience with monitoring/logging tools (Prometheus, Grafana, ELK/EFK).
• Strong problem-solving skills and ability to work independently under pressure.

Responsibilities

• Design, implement, and maintain IaC for AWS cloud environments.
• Deploy, manage, and optimize containerized applications on OpenShift/Kubernetes.
• Manage Kubernetes/OpenShift clusters, including scaling, upgrades, and patching.
• Troubleshoot and resolve infrastructure, networking, and deployment issues.
• Build and maintain CI/CD pipelines to support development and release cycles.
• Automate repetitive operational tasks to improve deployment speed and reliability.
• Implement pipeline security gates and automated checks.
• Embed security checks across the SDLC (SAST/DAST/SCA) and container image scanning.
• Manage secrets securely using Vault or AWS Secrets Manager.
• Implement policy-as-code and compliance-as-code to enforce guardrails.
• Apply IAM least-privilege principles across AWS and OpenShift RBAC.
• Monitor for vulnerabilities, misconfigurations, and compliance drift; support audits.
• Collaborate with security teams to align with compliance frameworks.

Skills

AWS

OpenShift

Kubernetes

CI/CD

DevSecOps

Bash

Python

Go

Terraform

Vault

Tools

GitHub Actions

Jenkins

Tekton

ArgoCD

Flux

Trivy

Clair

OWASP ZAP

Job description

We are looking for an experienced DevOps Engineer to join our infrastructure/platform team under our sister company, AngelHack Developer Labs . You will design, build, and maintain scalable cloud infrastructure and CI/CD pipelines, with a strong focus on AWS and Red Hat OpenShift environments. This role has a strong DevSecOps component — you will be expected to embed security practices throughout the development and deployment lifecycle, not treat it as an afterthought.

Key Responsibilities

Infrastructure & Platform

• Design, implement, and maintain infrastructure-as-code (IaC) for AWS cloud environments
• Deploy, manage, and optimize containerized applications on Red Hat OpenShift (OKD/OCP)
• Manage Kubernetes/OpenShift clusters, including scaling, upgrades, and patching
• Troubleshoot and resolve infrastructure, networking, and deployment issues

CI/CD & Automation

• Build and maintain CI/CD pipelines to support development and release cycles
• Automate repetitive operational tasks to improve deployment speed and reliability
• Implement pipeline security gates (e.g., automated approval blocks on failed scans)

DevSecOps / Security Integration

• Embed security checks across the SDLC ("shift left") — including static application security testing (SAST), dynamic testing (DAST), and software composition analysis (SCA)
• Perform container/image vulnerability scanning before deployment to OpenShift (e.g., Trivy, Clair, Red Hat ACS/StackRox)
• Manage secrets securely using tools like HashiCorp Vault, AWS Secrets Manager, or OpenShift Secrets
• Implement policy-as-code and compliance-as-code (e.g., Open Policy Agent, OPA Gatekeeper) to enforce security and governance guardrails
• Apply IAM least-privilege principles across AWS and OpenShift RBAC configurations
• Monitor for security vulnerabilities, misconfigurations, and compliance drift in infrastructure and pipelines
• Support security audits, vulnerability remediation, and incident response processes
• Collaborate with security teams to align with organizational compliance frameworks

Monitoring & Reliability

• Implement and maintain monitoring, logging, and alerting solutions (e.g., Prometheus, Grafana, ELK/EFK)
• Support disaster recovery, backup strategies, and incident response procedures
• Document infrastructure architecture, security controls, runbooks, and operational procedures

Requirements

• Singapore Citizen , based in Singapore
• 3–5 years of relevant DevOps/DevSecOps/Platform Engineering experience
• Hands‑on experience with AWS (EC2, S3, VPC, IAM, Lambda, RDS, CloudFormation/Terraform, etc.)
• Practical experience with Red Hat OpenShift (deployment, cluster management, operators, RBAC)
• Solid understanding of containerization technologies (Docker, Kubernetes)
• Experience with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, Tekton)
• Working knowledge of security scanning tools (SAST/DAST/SCA — e.g., SonarQube, Snyk, Checkmarx, OWASP ZAP)
• Experience with container/image scanning tools (Trivy, Clair, Aqua, or Red Hat ACS)
• Familiarity with secrets management tools (Vault, AWS Secrets Manager)
• Proficiency in scripting languages (Bash, Python, or Go)
• Familiarity with configuration management tools (Ansible, Chef, or Puppet)
• Understanding of networking fundamentals (DNS, load balancing, firewalls, VPNs)
• Experience with monitoring/logging tools (Prometheus, Grafana, ELK/EFK stack)
• Strong problem-solving skills and ability to work independently under pressure
• Good communication skills and ability to collaborate across Dev, Ops, and Security teams
  

Good to Have

• AWS Certification (Solutions Architect, DevOps Engineer, or SysOps Administrator)
• Red Hat Certified Specialist in OpenShift Administration (or equivalent)
• Security certifications (e.g., CompTIA Security+, Certified Kubernetes Security Specialist - CKS)
• Experience with GitOps tools (ArgoCD, Flux)
• Exposure to compliance frameworks relevant to your industry (e.g., MAS TRM, ISO 27001, PCI-DSS)
• Experience working in Agile/Scrum environments