DevSecOps Engineer

User Experience Researchers Pte.Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

User Experience Researchers Pte.Ltd is seeking a seasoned DevSecOps/Cloud Infrastructure Engineer to design, automate, and maintain secure, scalable infrastructure and deployment pipelines in a Singapore-based role. You will deploy, monitor, and secure cloud resources, while collaborating with developers to embed security across the software lifecycle.

Responsibilities include building CI/CD pipelines, implementing IaC, managing cloud services, and driving reliability, compliance, and disaster

Qualifications

• Extensive experience with SDLC, CI/CD, TDD and DevSecOps practices.
• Experience designing, deploying and supporting cloud-native apps/infrastructure on AWS (GCC environment a plus).
• Proficiency in two or more programming/scripting languages (Bash, PowerShell, Python, JavaScript, Java).
• Experience with infrastructure-as-code and automation tools (Terraform, Ansible, or equivalents).
• Experience with Docker and Kubernetes for containerisation/orchestration.
• Experience with GitLab workflows, CI/CD platforms, and source control management.
• Experience implementing monitoring, logging, and observability for reliability.
• Knowledge of application security, cloud security, secure coding, and DevSecOps principles.
• Hands-on vulnerability management, system hardening, and remediation activities.
• Familiarity with CNCF tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management (HashiCorp Vault, Tenable, Fortify, Nexus IQ, AWS security services).
• Experience with AWS IAM, networking, monitoring, container platforms, and security.
• Strong troubleshooting, incident response, and operational support skills.
• Experience in regulated or government environments preferred.

Responsibilities

• Design, automate, and maintain secure, scalable infrastructure and deployment pipelines.
• Develop automation to deploy, manage, monitor, and maintain applications and infra.
• Design and maintain CI/CD pipelines for deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling to support build, test, integration, and release processes.
• Monitor and optimise platform availability, performance, and health.
• Implement security controls and ensure compliance with government security requirements.
• Plan, implement, and monitor security architecture including risk assessments.
• Conduct vulnerability assessments, system hardening, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate and resolve system, app, and infra issues.
• Collaborate with developers to integrate security across SDLC.
• Coordinate with team members.

Job description

Key Role & Responsibility:

Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines:

• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration, and release processes.
• Monitor and optimise platform availability, performance, utilisation, reliability, and operational health.
• Implement security controls and ensure compliance with government security requirements.
• Plan, and implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues.
• Collaborate closely with developers to integrate security throughout the software development lifecycle.
• Coordinate and work together with other members of the team.

Experience & Skills Needed:

• Strong understanding of Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD), and DevSecOps practices.
• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with GCC environment is advantageous.
• Proficiency in at least two programming/scripting languages:
  • Bash
  • PowerShell
  • Python
  • JavaScript
  • Java
• Experience with infrastructure-as-code and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerisation and orchestration technologies including Docker and Kubernetes.
• Experience with source code management, GitLab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging, and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security and cloud security, secure coding practices, and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening, and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management solutions (HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, AWS security services).
• Experience with AWS services related to identity and access management, networking, monitoring, container platforms, and security.
• Strong troubleshooting, incident response, and operational support skills.
• Experience working in regulated or government environments is preferred.