DevSecOps Engineer

PERSOL SINGAPORE PTE. LTD.; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

PERSOL SINGAPORE PTE. LTD. in Singapore is seeking a DevOps Engineer to develop and maintain CI/CD pipelines using the SHIP-HATS tools ecosystem, configure GitLab, and enforce code quality gates with SonarQube and security scans (Fortify, Nexus IQ).

You will manage ABLR, CAM, VAPT findings, and PDPIA compliance while collaborating with Data Teams. You will work in a government-oriented environment leveraging AWS services and strong scripting skills to ensure secure, compliant operations and data

Qualifications

• Minimum 3 years of DevOps engineering experience in relevant environments.
• Experience in Government Environments (e.g., GCC).
• Proficient with AWS services and GitLab CI/CD pipelines.
• Strong scripting in Python, Bash, PowerShell.
• Familiarity with security scanning tools and vulnerability management.

Responsibilities

• Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
• Configure GitLab for version control and automated deployment workflows.
• Implement code quality gates using SonarQube for static analysis.
• Manage security scanning with Fortify on Demand (FOD).
• Oversee dependency scanning using Nexus IQ.
• Coordinate with CloudSCAPE for security compliance scanning and remediation.
• Implement and maintain Automated Baseline Log Review (ABLR).
• Manage CAM integration for user access control.
• Coordinate and resolve VAPT findings.
• Ensure compliance with PDPIA requirements.
• Implement and maintain Vulnerability Management System (VMS).
• Manage secrets and encryption key rotation for data protection.
• Implement and maintain data retention policies.
• Support SaaS whitelisting processes and approvals.
• Coordinate SSAT activities.
• Collaborate with Data Engineers, Data Analysts, and Security Tech Teams.

Skills

DevOps

Agile development

AWS

Scripting: Python/Bash/PowerShell

Security clearance

Data classification

Encryption & KMS

Security monitoring & IR

Government environments

Tools

GitLab CI/CD

SonarQube

Fortify on Demand (FOD)

Nexus IQ

ABLR systems

CAM integration

PDPIA compliance tools

VAPT tools

CloudSCAPE security scanning

Data encryption tools

Job description

Responsibilities:

• Develop and maintain CI/CD pipelinesusing SHIP-HATS tools ecosystem.
• Configure GitLabfor version control and automated deployment workflows
• Implement code quality gates using SonarQubefor static code analysis.
• Manage security scanning using Fortify on Demand (FOD)for vulnerability assessment.
• Oversee dependency scanning and management using Nexus IQ.
• Coordinate with CloudSCAPEfor security compliance scanning and remediation.
• Implement and maintain Automated Baseline Log Review (ABLR)systems.
• Manage Central Accounts Management (CAM)integration for user access control.
• Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT)findings.
• Ensure compliance with Personal Data Protection Impact Assessment (PDPIA)requirements
• Implement and maintain Vulnerability Management System (VMS).
• Manage secretsand encryption key rotationfor data protection.
• implement and maintain data retention policies
• Support SaaS whitelistingprocesses and approvals.
• Coordinate System Security Acceptance Testing (SSAT)activities
• Work closely with Data Engineers, Data Analysts, and Security Technical Teams.

Requirements:

• Minimum 3 years of DevOps Engineering Experience.
• Experience working in Government Environments, such as GCC
• Experience in Agile Development Methodologies.
• Expertise in AWS Services
• Experience withGitLab CI/CD Pipelinedevelopment and management
• Knowledge of security scanning tools such as SonarQube, Fortify, Nexus IQ
• Strong scripting skills in Python, Bash and PowerShell
• Experience withGovernment Security Clearance Processes.
• Knowledge ofData Classificationand handling procedures
• Understanding ofEncryption MechanismsandKey Management.
• Experience with Security MonitoringandIncident Response Procedures.
• Familiarity with Vulnerability Managementand remediation processes.