DevSecOps Engineer

PERSOL Singapore; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

PERSOL SINGAPORE PTE. LTD. is seeking an experienced DevOps Engineer to join our government-focused security operations.

You will design, implement, and maintain CI/CD pipelines using SHIP-HATS tools ecosystem, and coordinate with security teams to ensure compliance across Cloud environments. The role requires strong scripting in Python, Bash, and PowerShell, AWS expertise, and experience with GitLab CI/CD.

Qualifications

• 3+ years of DevOps engineering experience.
• Experience in government environments (e.g., GCC).
• Experience with Agile development methodologies.

Responsibilities

• Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
• Configure GitLab for version control and automated deployment workflows.
• Implement code quality gates using SonarQube for static analysis.
• Manage security scanning using Fortify on Demand for vulnerability assessment.
• Oversee dependency scanning and management using Nexus IQ.
• Coordinate with CloudSCAPE for security compliance scanning and remediation.
• Implement and maintain Automated Baseline Log Review (ABLR) systems.
• Manage CAM integration for user access control.
• Coordinate and resolve VAPT findings.
• Ensure PDPIA compliance requirements.
• Implement and maintain Vulnerability Management System (VMS).
• Manage secrets and encryption key rotation for data protection.

Skills

Python

Bash

PowerShell

Agile

AWS

Security incident response

Vulnerability management

Tools

GitLab CI/CD

SonarQube

Fortify on Demand (FOD)

Nexus IQ

Job description

Responsibilities

• Develop and maintain CI/CD pipelinesusing SHIP-HATS tools ecosystem.
• Configure GitLabfor version control and automated deployment workflows
• Implement code quality gates using SonarQubefor static code analysis.
• Manage security scanning using Fortify on Demand (FOD)for vulnerability assessment.
• Oversee dependency scanning and management using Nexus IQ.
• Coordinate with CloudSCAPEfor security compliance scanning and remediation.
• Implement and maintain Automated Baseline Log Review (ABLR)systems.
• Manage Central Accounts Management (CAM)integration for user access control.
• Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT)findings.
• Ensure compliance with Personal Data Protection Impact Assessment (PDPIA)requirements
• Implement and maintain Vulnerability Management System (VMS).
• Manage secretsand encryption key rotationfor data protection.
• implement and maintain data retention policies
• Support SaaS whitelistingprocesses and approvals.
• Coordinate System Security Acceptance Testing (SSAT)activities
• Work closely with Data Engineers, Data Analysts, and Security Technical Teams.

Requirements

• Minimum 3 years of DevOps Engineering Experience.
• Experience working in Government Environments, such as GCC
• Experience in Agile Development Methodologies.
• Expertise in AWS Services
• Experience withGitLab CI/CD Pipelinedevelopment and management
• Knowledge of security scanning tools such as SonarQube, Fortify, Nexus IQ
• Strong scripting skills in Python, Bash and PowerShell
• Experience withGovernment Security Clearance Processes.
• Knowledge ofData Classificationand handling procedures
• Understanding ofEncryption MechanismsandKey Management.
• Experience with Security MonitoringandIncident Response Procedures.
• Familiarity with Vulnerability Managementand remediation processes.