DevSecOps Engineer

User Experience Researchers Pte Ltd; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Job summary

User Experience Researchers Pte Ltd is seeking a skilled DevSecOps/Cloud Security Engineer in Singapore to design secure, scalable infrastructure and automated deployment pipelines across cloud environments. You will implement IaC, automate deployments, and ensure platform reliability while integrating security across the SDLC.

Responsibilities include managing cloud resources, building CI/CD tooling, and performing vulnerability assessments with a focus on compliance and disaster recovery

Qualifications

• Strong SDLC, CI/CD, TDD and DevSecOps understanding.
• Experience deploying cloud-native apps/infrastructure on AWS.
• Proficiency in two+ programming/scripting languages.
• Experience with IaC and automation tools.
• Experience with containers and orchestration (Docker, Kubernetes).
• Knowledge of security and cloud security practices.

Responsibilities

• Design, automate, and maintain secure, scalable infrastructure and pipelines.
• Develop automation to deploy, manage, monitor, and maintain apps and infra.
• Design and maintain CI/CD pipelines for deployment and release.
• Implement infrastructure-as-code and environment automation.
• Manage cloud resources and platform services.
• Develop CI/CD tooling to support build, test, integration, release.
• Monitor, optimize platform availability, performance, and health.
• Implement security controls and ensure compliance with security requirements.
• Plan and monitor system security architecture and risk assessments.
• Carry out vulnerability assessments, hardening, and remediation.
• Implement disaster recovery, backup, and business continuity.
• Investigate and resolve system, app, infra issues.
• Collaborate with developers to integrate security in SDLC.

Skills

CI/CD

DevSecOps

Cloud security

AWS

Threat risk assessments

Monitoring & observability

Vulnerability management

Scripting (Python/PowerShell/Bash)

Automation

Tools

Terraform

Ansible

Docker

Kubernetes

GitLab

ArgoCD

Helm

Prometheus

HashiCorp Vault

Crossplane

Job description

Key Responsibilities:

• Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines:
• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration and release processes.
• Monitor and optimize platform availability, performance, utilization, reliability, and operational health.
• Implement security controls and ensure compliance with applicable security requirements.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues.
• Collaborate closely with developers to integrate security throughout the software development lifecycle.
• Coordinate and work together with other members of the team.

Experience & Skills Needed

• Strong understanding of Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD) and DevSecOps practices.
• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with government cloud environments is advantageous.
• Proficiency in at least two programming/scripting languages (Bash, PowerShell, Python, Javascript, or Java).
• Experience with infrastructure-as-code and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerization and orchestration technologies including Docker and Kubernetes.
• Experience with source code management, GitLab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security and cloud security, secure coding practices, and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management solutions (HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, AWS security services).
• Experience with AWS services related to identity and access management, networking, monitoring, container platforms, and security.
• Strong troubleshooting, incidentresponse, and operationalsupport skills.
• Experience working in regulatedor government environments ispreferred