DevSecOps Engineer

United States Digital Space LLC; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking a seasoned Platform Engineer to design and operate a cloud-native platform that supports scalable development and deployment across Kubernetes clusters. You will implement infrastructure as code, GitOps, and automated pipelines to enable fast, secure, and reliable software delivery.

You’ll drive platform reliability, establish SLOs/SLIs, and collaborate with developers to deliver self-serve capabilities while maintaining strict security controls and

Qualifications

• Experience building end-to-end platform or DevOps capabilities.
• Hands-on Kubernetes in production with RBAC and admission controls.
• IaC practice with GitOps delivery and testing.
• Experience with CI/CD pipelines and release strategies.
• Security: least privilege, secrets management, supply-chain integrity.
• Operational maturity: define SLOs and incident response.
• Proficient in Go, Python, or Bash; comfortable with Linux.
• Infrastructure as code: version-controlled, tested, and secured.

Responsibilities

• Cloud infrastructure as code using Terraform/OpenTofu and GitOps.
• Platform engineering on Kubernetes with observability, multi-tenancy, RBAC, governance, and FinOps.
• DevOps and golden paths for build/test/release with secure-by-default practices.
• Developer self-service interfaces for namespaces, repos, and access.
• Operate platform at runtime; define SLIs/SLOs; run upgrades; root-cause analysis and fixes.

Skills

Platform engineering

Kubernetes

Infrastructure as code

GitOps

CI/CD pipelines

Cloud-native security

SRE / incident response

Go/Python/Bash

Linux

Education

Bachelor's degree in computer science or IT

Master's degree in Computer Science or Information Technology

Tools

Terraform/OpenTofu

FluxCD/Argo CD

GitLab pipelines

Azure AKS

Azure Key Vault / Entra ID

Sigstore/cosign

Job description

Location: Singapore, Singaporethe company is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Singapore, the company has been a trusted partner since 1973, originally focused on aerospace activities in the Asia‑Pacific region. With 2,000 employees across three local sites, we deliver cutting‑edge solutions across aerospace (including air traffic management), defence and security, and digital identity and cybersecurity sectors. Together, we’re shaping the future by enabling customers to make pivotal decisions that safeguard communities and power progress.

Responsibilities

• Cloud infrastructure as code – Build the cloud foundation in Terraform and OpenTofu, to a high standard. You design Azure infrastructure to be configurable, so the platform can provision clusters of different profiles, such as front‑facing, data‑oriented, and developer‑oriented, from the same well‑factored code. You treat infrastructure as code as software: small, composable modules that assemble into a coherent foundation, with the versioning, review, and testing that keep them reliable and reusable. The desired state lives in Git, the platform reconciles it through GitOps, and drift is detected rather than discovered.
• Platform engineering on Kubernetes – Build platform‑as‑a‑service on that foundation and operate both the platform and the capabilities that run on it: observability, multi‑tenancy, RBAC, governance, and FinOps. Alongside the security controls that keep it sound, including Pod Security Standards and Admission, a zero‑trust posture with workload‑to‑workload mTLS, and supply‑chain integrity through image signing. New initiative also includes enabling AI workloads, such as model serving and a governed AI gateway.
• DevOps and golden paths – Work across teams to build the golden paths developers follow paved routes for build, test, and release that are efficient and enforce code quality and security by default, so the secure path is also the easy one. You also build the services that support delivery, integrating testing, security scanning, SBOM generation, and observability into the pipeline, so pipeline health, runner configuration, and the state of the delivery system stay visible and well managed.
• Developer self‑service – Build the interfaces that let developers provision what they need, such as team identity and access, correctly configured repositories, namespaces, and cluster resources, without the platform team becoming a bottleneck. The goal is a platform that scales through self‑service rather than manual requests, with every capability maturing toward being self‑served or provided by default. You document these paths as you build them, so runbooks and golden‑path guides are part of the deliverable.
• Operate and keep it reliable – Own the platform at runtime, not just at provisioning. You define and measure the SLIs and SLOs for the capabilities you ship, write the runbooks that make failure recoverable, and lead incident response when the platform degrades. You plan and run lifecycle work, such as cluster and component upgrades, with no data loss and minimal disruption to the teams on top, and when something breaks, you trace it to root cause and fix it accordingly.

REQUIREMENTS

Education

• Bachelor's degree in computer science, Information Technology or related field.
• Master's degree in Computer Science or Information Technology if applicable

Essential Skills/Experience

• Several years building platform or DevOps capabilities end to end, from a developer problem to a production‑grade, self‑service solution (three to five years is a useful guide).
• Strong, hands‑on Kubernetes experience in production, including RBAC, admission control, and diagnosing and resolving platform issues under pressure.
• Solid infrastructure‑as‑code practice (Terraform or OpenTofu) and a GitOps approach to delivery (FluxCD or Argo CD).
• A working command of CI/CD pipelines and release strategy (GitLab pipelines, or equivalent).
• A sound grasp of cloud‑native security: least privilege, network segmentation, secrets management, identity, and supply‑chain integrity.
• Operational maturity: defining SLOs, responding to incidents, and running upgrades safely in production.
• Proficiency in at least one of Go, Python, or Bash, and comfort operating Linux.
• The conviction that infrastructure is code: version‑controlled, reviewed, tested, and secured.

Desirable Skills/Experience

• Depth in Azure and its native services (AKS, AI Foundry, Network Manager, Key Vault, Entra ID, Application Gateway, Firewall, Private Endpoints).
• Experience building or operating an internal developer platform or developer portal.
• Familiarity with supply chain tooling (Sigstore/cosign, Trivy, DefectDojo, or equivalent) and policy engines (Kyverno, OPA/Gatekeeper).
• Exposure to data‑platform components such as a lakehouse, event streaming, or workflow orchestration.
• Exposure to safety‑critical or regulated environments and the assurance discipline they require.

Essential / Desirable Traits

• You see systems end to end and resist thinking in silos.
• You translate technology into developer experience and hold several stakeholders' perspectives at once.
• You treat the platform as a product: you measure adoption and developer experience, and let that evidence, not assumption, guide what to build, harden, or retire next.
• You have learning agility, flexibility, and initiative.
• You are comfortable in an agile team and engaging directly with the developers you serve.
• You hold your convictions with humility, welcome constructive feedback, and stay resilient.

At the company, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.