DevSecOps Engineer

EMQ2 TECHNOLOGY SERVICES PTE. LTD.; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

EMQ2 TECHNOLOGY SERVICES PTE. LTD. seeks a DevSecOps Engineer to design, develop, and maintain automated provisioning pipelines and IaC templates supporting application teams across the organisation.

You will deliver secure, scalable templates for AWS resources, CI/CD, and security controls, collaborating with engineering teams to streamline onboarding, automate workflows, and resolve platform issues. The role emphasizes security, automation, and enterprise-scale tooling.

Qualifications

• Experience in DevOps, cloud automation, or platform engineering with strong understanding of AWS.
• Hands-on experience designing and maintaining Infrastructure as Code (IaC) templates (e.g., CloudFormation, Terraform, CDK).
• Strong knowledge of CI/CD (GitLab CI, GitHub Actions, Jenkins, etc.) and automated provisioning pipelines.
• Understanding of security best practices across IAM, secrets management, KMS, and AWS network security.

Responsibilities

• Automated Onboarding & Developer Tools Provisioning for tenants (GitLab repo creation, user roles, Jira workflows, Confluence spaces).
• Develop and maintain AWS templates for EC2, Image Builder, Lambda, RDS, DynamoDB, and networking resources.
• Create reusable security-centric templates (IAM roles/policies, KMS, Secrets Manager).
• Build and maintain platform automation pipelines (Liquibase, RDS hardening) and provide support for platform requests.

Skills

DevOps

Cloud automation

IaC templates

CloudFormation

Terraform

CDK

Scripting (Python)

CI/CD

Security practices

Tools

GitLab CI

GitHub Actions

Jenkins

Terraform

CloudFormation

CDK

AWS IAM/KMS

Image Builder

Job description

We are seeking a DevSecOps Engineer to design, develop, and maintain automated provisioning pipelines and infrastructure templates that support application teams across the organisation. The role involves building secure, scalable, and reusable templates for AWS resources, CI/CD, security controls, and developer productivity tools. You will work closely with engineering teams to streamline onboarding, enhance automation, and support platform-related issues.

Roles & Responsibilities

1. Automated Onboarding & Developer Tools Provisioning

   Provision and maintain automated onboarding pipelines enabling tenants to rapidly provision resources and assign roles for:

   • GitLab: Creation of project repositories
   • Assignment of GitLab roles to users
   • Jira: Ticketing workflow creation
   • Confluence: Workspace creation
2. AWS Compute Resource Templates

   Develop and maintain base templates such as:

   • EC2 bootstrap templates for application deployment, database jump hosts, etc.
   • AWS Image Builder templates for bring-your-own-AMI (e.g., GitLab Runner image).
   • Lambda deployment templates for application deployment and secrets automation.
3. AWS Database Resource Templates

   Create and manage templates to provision:

   • DynamoDB
   • RDS for Microsoft SQL Server
4. AWS Network Resource Templates

   Develop and maintain network infrastructure templates including:

   • Security groups and rules
   • API Gateway and API Gateway stages
   • Application Load Balancer (ALB) and Network Load Balancer (NLB)
5. AWS Security Resource Templates

   Build reusable security-centric templates such as:

   • IAM roles and policies
   • KMS keys and configurations
   • AWS Secrets Manager resources
6. AWS Storage & Backup Templates

   Provision and maintain infrastructure templates for:

   • AWS Backup
   • S3 buckets
7. AWS EC2 Image Builder Stacks

   Develop and maintain:

   • Image Builder stacks for RHEL 8 and Windows Server 2019
   • Build and test components
   • Image Builder infra-config and recipes
   • Templates enabling tenants to provision custom AMIs based on enterprise Golden AMIs
8. Platform Automation Pipelines

   Build and maintain:

   • Liquibase automation pipelines
   • RDS hardening pipelines
9. Support

   Provide support for:

   • Service requests related to platform pipelines
   • Service requests related to platform templates

Requirements

• Experience in DevOps, cloud automation, or platform engineering with strong understanding of AWS.
• Hands-on experience designing and maintaining Infrastructure as Code (IaC) templates (e.g., CloudFormation, Terraform, CDK).
• Strong knowledge of CI/CD (GitLab CI, GitHub Actions, Jenkins, etc.) and automated provisioning pipelines.
• Understanding of security best practices across IAM, secrets management, KMS, and AWS network security.
• Experience with AWS services across compute, storage, network, security, and database domains.
• Strong scripting skills (Python, Bash, PowerShell, or similar).
• Ability to troubleshoot platform issues and support engineering teams effectively.
• Familiarity with image building pipelines and OS hardening processes is an advantage.

Additional Information

Opportunity to work on large-scale enterprise automation and DevSecOps initiatives.

Role offers exposure to cloud security, automation frameworks, CI/CD, and modern DevSecOps tools.

Collaborative environment with continuous learning and adoption of new technologies.