DevSecOps Engineer

OX CONSULTANCY PTE. LTD.; Singapore; Ibrido; SGD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

OX CONSULTANCY PTE. LTD. seeks a seasoned DevSecOps/Cloud Infrastructure Engineer to design, implement, and secure scalable infrastructure across data centers and AWS cloud in Singapore. You will build CI/CD pipelines and automate provisioning with Terraform and Ansible.

You will manage Docker-based apps, monitor with Grafana and CloudWatch, perform vulnerability assessments, and ensure compliance with security standards. The role includes on-call support and disaster recovery planning.

Competenze

• Hands-on experience with infrastructure as code and DevSecOps practices.
• Proficiency in three or more scripting/programming languages.
• Experience with AWS cloud services and multi-data-centre environments.
• Knowledge of security, monitoring, and vulnerability management tools.

Mansioni

• Design, implement, and maintain secure, scalable infrastructure across data centres and AWS cloud environments.
• Develop automation scripts using Bash, PowerShell, Python, Go, or similar.
• Build and maintain CI/CD pipelines with integrated security checks.
• Automate provisioning with Terraform and Ansible.
• Manage containerized apps using Docker and AWS ECS/Fargate.
• Implement monitoring with Grafana, CloudWatch, and OpenTelemetry.
• Conduct vulnerability assessments, security hardening, and risk assessments.
• Apply security controls, secrets management, and secure configurations.
• Support DR, backup, high availability, and business continuity planning.
• Troubleshoot complex issues and participate in on-call support.
• Ensure compliance with security standards and policies.

Conoscenze

Bash

PowerShell

Python

Go

Terraform

Ansible

Docker

AWS

CI/CD

Security

Formazione

Degree or Diploma in CS/IT/Engineering

Strumenti

Git/GitLab/GitHub

VMware

KVM/Hyper-V

Grafana

CloudWatch

OpenTelemetry

HashiCorp Vault

Tenable

Fortify

Nexus IQ

AWS security services

Descrizione del lavoro

Job Responsibilities

• Design, implement, and maintain secure, scalable, and resilient infrastructure across data centres and AWS cloud environments.
• Develop automation scripts and tools using Bash, PowerShell, Python, Go, or other scripting languages.
• Build, configure, and maintain CI/CD pipelines, integrating security checks into build, testing, and deployment processes.
• Automate infrastructure provisioning and configuration management using Terraform and Ansible.
• Manage containerized applications using Docker and AWS container services, including Amazon ECS and Fargate.
• Implement infrastructure monitoring, logging, and observability using Grafana, Amazon CloudWatch, and OpenTelemetry.
• Perform vulnerability assessments, security hardening, threat and risk assessments, and security incident troubleshooting.
• Implement security controls, secrets management, access controls, and secure configurations across cloud infrastructure and applications.
• Support disaster recovery, backup and restoration, high availability, and business continuity planning.
• Troubleshoot complex infrastructure and application issues and participate in on-call support when required.
• Ensure compliance with applicable security standards and organizational policies.

Requirements

• Degree or Diploma in Computer Science, Information Technology, Computer Engineering, or a related discipline.
• Strong understanding of SDLC, CI/CD, secure software development, and DevSecOps practices.
• Hands-on experience with AWS cloud services and hybrid cloud or multi-data-centre environments.
• Proficiency in at least three scripting or programming languages, such as Bash, PowerShell, Python, or Go.
• Experience with Git and source control platforms such as GitLab, GitHub, or Bitbucket.
• Practical experience with Terraform, Ansible, Docker, and AWS ECS/Fargate.
• Knowledge of virtualization technologies such as VMware, KVM, or Hyper-V.
• Experience with monitoring, vulnerability scanning, and infrastructure security tools.
• Understanding of networking, firewalls, subnets, routing, access controls, and system hardening.
• Experience with backup, disaster recovery, and RPM-based software packaging.
• Strong analytical, troubleshooting, communication, and collaboration skills.

Preferred Qualifications

• Experience with HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, Elasticsearch, or AWS security services.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, and security compliance frameworks.
• Relevant certifications such as AWS Security Specialty, CISSP, CISM, or CREST.
• Experience in government, financial services, or other highly regulated environments.
• Knowledge of API security, Zero Trust architecture, secure service-to-service communication, AWS VPC Lattice, or AWS Service Connect.