DevSecOps Engineer

ITCAN PTE. LIMITED; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking experienced DevOps/SecOps professionals in Singapore. The role requires hands-on cloud infrastructure, IaC with Terraform, containers orchestration with Docker and Kubernetes (EKS), and strong CI/CD implementation.

The ideal candidate will also have a security-focused mindset, experience with security scanning tools, and expertise in observability and production operations in cloud environments.

Qualifications

• Hands-on AWS cloud infrastructure setup and management.
• Terraform or similar IaC for defining secure cloud environments.
• Docker and Kubernetes (EKS) for container orchestration.
• CI/CD implementation and automation experience.
• Security-centric approach to application and infra security.
• Experience with security scanning tools and practices.
• Observability tools to monitor and troubleshoot systems.
• Production operations experience in live environments.
• Familiarity with Golang, Kotlin, Next.js/TypeScript and Temporal on Kubernetes.
• Identity services: ADFS, Windows AD, SAML, OIDC, CAM.

Skills

AWS

Terraform

Docker

Kubernetes

CI/CD

Security practices

Observability

Production operations

Golang

Kotlin

Next.js/TypeScript

Temporal on Kubernetes

Identity management (SAML/OIDC)

Tools

Dynatrace

Datadog

Job description

Requirements

Experience

• Consultant: 3-5 years of hands-on DevOps, cloud infrastructure, or DevSecOps experience.
• Senior Consultant: 7+ years of experience, including at least 2-3 years defining secure cloud architecture or leading DevSecOps implementation.
• Experience with Singapore Government or public sector security and compliance requirements is an advantage.

Technical skills (must have)

• AWS: hands-on experience with setting up AWS cloud infrastructure
• Infrastructure as Code: hands-on experience with Terraform (or equivalent)
• Containers: hands-on experience with Docker, Kubernetes (EKS)
• CI/CD: hands-on experience in setting up CI/CD
• Security: hands-on experience with application and infra security practices
• Security scanning tools: hands-on experience with security scanning tools
• Observability: hands-on experience with at least one observability tool
• Operations: hands-on experience in production operations

Technical skills (good to have)

• Familiarity with observability tools such as Dynatrace, Datadog
• Familiarity with building, containerising, and deploying applications in Golang, Kotlin, and Next.js/TypeScript, and with operating a workflow engine such as Temporal on Kubernetes
• Identity: ADFS, WOG AD, SAML, OIDC, CAM