DevOps GCC - AVENSYS CONSULTING PTE. LTD.

OpenTalent; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OpenTalent seeks an experienced DevOps Engineer to support the DataSphere platform on AWS GCC. You will build robust CI/CD pipelines, configure GitLab for automated deployments, and ensure compliance with stringent security and governance requirements.

Responsibilities include implementing security scanning with SonarQube, Fortify, and Nexus IQ; ABLR and PDPIA compliance; and coordinating with security operations for vulnerability remediation and data protection across multiple datamarts.

Qualifications

• Experience with AWS GCC environment and GovTech security standards.
• Proficient with Infrastructure-as-Code tools and cloud security practices.
• Proven track record in GitLab CI/CD pipeline development and management.
• Knowledge of security scanning tools (SonarQube, Fortify, Nexus IQ).
• Familiarity with VAPT, PDPIA, and data classification requirements.

Responsibilities

• Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem and configure GitLab for automated deployments.
• Implement and oversee security scans and baselines, including ABPR/ABLR and PDPIA compliance.
• Monitor platform operations, secret management, and key rotation for data protection.
• Coordinate with security teams and stakeholders to address vulnerabilities and remediation.

Skills

AWS GCC

Terraform

GitLab CI/CD

SonarQube

Fortify on Demand

Nexus IQ

Scripting: Python/Bash/PowerShell

Security & Compliance

Tools

GitLab CI/CD

Terraform

SonarQube

Fortify on Demand

Nexus IQ

Abstraction: ABLR

Job description

Job Description

Position Overview

We are seeking an experienced DevOps Engineer to support the DataSphere platform, a comprehensive data lakehouse solution built on AWS Government Commercial Cloud (GCC) environment. The successful candidate will be responsible for implementing robust CI/CD pipelines using government-approved tools, and ensuring compliance with stringent security and governance requirements.

Key Responsibilities

CI/CD Pipeline Management: Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem Configure GitLab for version control and automated deployment workflows Implement code quality gates using SonarQube for static code analysis Manage security scanning using Fortify on Demand (FOD) for vulnerability assessment Oversee dependency scanning and management using Nexus IQ Coordinate with CloudSCAPE for security compliance scanning and remediation Security and Compliance: Implement and maintain Automated Baseline Log Review (ABLR) systems Coordinate with GovTech Cyber Security Operations Centre (GCSOC) for security monitoring Manage Central Accounts Management (CAM) integration for user access control Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT) findings. Ensure compliance with Personal Data Protection Impact Assessment (PDPIA) requirements Implement and maintain Vulnerability Management System (VMS)

Platform Operations: Monitor system performance and implement optimization strategies Manage secrets and encryption key rotation for data protection Configure email notifications for data processing status and error alerts Implement and maintain data retention policies Support SaaS whitelisting processes and approvals Coordinate System Security Acceptance Testing (SSAT) activities

Collaboration and Support: Work closely with Data Engineers, Data Analysts and security technical team. Support multiple datamarts Provide technical guidance for Raw-to-Tech and Tech-to-Business data pipelines Collaborate with various government divisions and stakeholders Support training environment setup for user onboarding and skill development

Required Qualifications

Technical Skills:

Strong expertise in AWS services, particularly in GCC environment Proficiency in Infrastructure-as-Code tools, preferably

Terraform Experience with GitLab CI/CD pipeline development and management Knowledge of security scanning tools (SonarQube, Fortify, Nexus IQ) Understanding of government security frameworks and compliance requirements Experience with containerization and orchestration technologies Strong scripting skills in Python, Bash, or PowerShell

Security and Compliance: Experience with government security clearance processes

Knowledge of data classification and handling procedures (Sensitive High)

Understanding of encryption mechanisms and key management