DevSecOps Engineer

Talent-Merge; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Talent-Merge is seeking an experienced Cloud Engineer to design, develop, and maintain secure, scalable cloud infrastructure and application environments in Singapore. You will build CI/CD pipelines, implement IaC with Terraform/Ansible, and manage AWS resources using Docker/Kubernetes for modern deployments.

You will also implement monitoring and security across the SDLC, perform vulnerability assessments, and participate in incident response and DR/BC planning.

Qualifications

• Experience with SDLC, CI/CD, DevSecOps and TDD practices.
• Hands-on AWS cloud-native design, deployment and support; GCC/regulatory experience advantageous.
• Proficiency in Python, Bash, PowerShell, JavaScript or Java.
• Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD tools; monitoring/observability.
• Good knowledge of application and cloud security, vulnerability management and hardening.
• Familiarity with Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, Vault, Tenable, Fortify, Nexus IQ and AWS security services is a plus.

Responsibilities

• Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments.
• Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes.
• Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies.
• Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications.
• Work with Docker and Kubernetes to support containerised applications and modern application deployment.
• Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health.
• Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams.
• Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities.
• Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities.
• Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability.

Skills

SDLC

CI/CD

DevSecOps

TDD

AWS

Python

Bash

PowerShell

JavaScript

Java

Terraform

Ansible

Docker

Kubernetes

GitLab

Monitoring

Security

Prometheus

Helm

ArgoCD

Istio

Gatekeeper

Crossplane

HashiCorp Vault

Tenable

Fortify

Nexus IQ

AWS security services

Tools

Terraform

Ansible

Docker

Kubernetes

GitLab

Prometheus

Helm

ArgoCD

Istio

Gatekeeper

Crossplane

HashiCorp Vault

Tenable

Fortify

Nexus IQ

AWS security services

Job description

Responsibilities

• Design, develop, and maintain secure, scalable and resilient cloud infrastructure and application environments.
• Build and enhance CI/CD pipelines to automate software builds, testing, integration, deployment and release processes.
• Implement Infrastructure-as-Code (IaC) and automation using tools such as Terraform, Ansible or equivalent technologies.
• Deploy, manage and optimise AWS cloud resources, platform services and cloud-native applications.
• Work with Docker and Kubernetes to support containerised applications and modern application deployment.
• Implement monitoring, logging and observability solutions to improve platform availability, performance, reliability and operational health.
• Integrate security throughout the Software Development Lifecycle (SDLC), working closely with developers and engineering teams.
• Conduct vulnerability assessments, security reviews, system hardening, threat and risk assessments, and remediation activities.
• Troubleshoot and resolve complex system, application, cloud and infrastructure issues, including supporting incident response activities.
• Implement and maintain backup, disaster recovery and business continuity measures while collaborating with cross-functional teams to continuously improve platform security and reliability.

Requirements

• Strong understanding of SDLC, CI/CD,DevSecOps and Test-Driven Development (TDD) practices.
• Hands-on experience designing, deploying and supporting AWS cloud-native applications and infrastructure; experience with GCC or regulated/government environments will be advantageous.
• Proficiency in at least two programming or scripting languages, such as Python, Bash, PowerShell, JavaScript or Java.
• Practical experience with Terraform/Ansible, Docker, Kubernetes, GitLab and CI/CD platforms, together with monitoring and observability solutions.
• Good knowledge of application security,cloud security, secure coding, vulnerability management, system hardening and remediation.
• Familiarity with modern cloud-native and security tools such as Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane, HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services will be an advantage.

Clarence Khoh
R1552376