DevSecOps Engineer

THALES SOLUTIONS ASIA PTE. LTD.; Singapore; On-site; SGD 140,000 - 180,000; Full time

Job summary

THALES SOLUTIONS ASIA PTE. LTD. seeks a skilled DevOps/Platform Engineer to build and maintain CI/CD pipelines supporting Agile teams across environments.

You will use IaC tools (Terraform, Helmfile, Ansible) to ensure reproducibility and compliance, and manage deployments in cloud and on-premise setups. You will implement security, monitoring and observability practices using OpenTelemetry, Jenkins, Git, and container technologies (Docker, Kaniko, Kubernetes).

Qualifications

• Bachelor's degree in computer science or information technology.
• Recognized engineering degree.

Responsibilities

• Build and maintain CI/CD pipelines for Agile teams and ARTs.
• Provision and manage development, test, staging, and production environments.
• Use IaC tools to ensure reproducibility and compliance.
• Ensure high availability in cloud and on-prem environments.
• Automate code quality, security scanning, release management and monitoring.

Skills

Linux expertise

Shell scripting

CI/CD pipelines

Kubernetes

Containerization

OpenTelemetry

Security practices

Monitoring & observability

Agile collaboration

DevSecOps mindset

Education

Bachelors in Computer Science or Information Technology

Recognized Engineering degree

Tools

Jenkins

Git

Terraform

Kaniko

Docker

Helmfile

Ansible

Kubernetes manifests

Job description

Responsibilities

• Build and maintain CI/CD pipelines that support Agile teams and ARTs.
• Provision and manage environments (development, test, staging, production).
• Use infrastructure as Code ( IaC ) tools (i.e., Terraform , Helmfile , Ansible , Kubernetes Manifests) to ensure re-producibility and compliance.
• Ensure high availability and resilience in cloud and on-prem environments (e.g., zero-downtime deployment, blue/green and canary release strategies)
• Manage the automation and toolchain integration for code quality, security scanning, release management and monitoring; automate repetitive tasks to improve flow efficiency across the value stream, ensure the toolchain aligns with the Lean-Agile principles.
• Work closely with System Architects, Release Train Engineers (RTEs) and agile teams to align on delivery practices.
• Provide DevOps coaching to teams so they adopt the right practices for version control, branching strategies, and automated testing.
• Support Program Increment (PI) planning by ensuring environments and pipelines is ready.
• Develop security practices (e.g., Secrets Management) into the software delivery CI pipelines to ensure the artefacts are of the premium quality level ( shift-left security) .
• Automate compliance checks and enforce policies (e.g., code signing, container scanning).
• Develop systems observability practices (e.g., monitoring, logs, traces) to define and track metrics like deployment frequency, lead time for changes, change failure rate, and MTTR.
• Collaborate with InfoSec and Compliance teams to run regular security audits, risk assessments and data assessments.
• Contribute to disaster recovery planning and testing.
• Work in an agile, cross-functional multinational team, actively engaging to support the success of the team.

Requirements

Education

• Bachelors in Computer Science or Information Technology
• Recognized Engineering degree

Essential Skills/Experience

• Strong expertise in Linux Operating System (i.e., Linux Process Sub-systems, Linux FileSystem)
• Strong expertise in Linux shell scripting (i.e., bash scripting)
• Strong expertise in designing and deploying Continuous Integration Pipelines for Software Development Teams
• Strong expertise in Secrets Management and Configuration Management of subsystems in a Container Orchestration Framework, such as Kubernetes.
• Strong expertise in designing, deploying & securing OCI containerized workloads (e.g., Docker, Kaniko) in Container Orchestration Frameworks (e.g., Kubernetes) running on-top of on-premises infrastructure and cloud infrastructure.
• Strong expertise in designing and implementing pro-active monitoring of production grade environments, incident response and allows swift mitigation of security threats.
• Expertise with observability tools like OpenTelemetry (OTEL) for monitoring and instrumentation, ensuring comprehensive visibility into system health and performance in Container Orchestration Frameworks.
• Demonstrated experience in working in data center environments; bonus if you have relevant experience on working in mission critical systems.
• Demonstrated ownership of the DevSecOps Mindset and demonstrated experiences of guiding the Software Development Teams in embracing the DevSecOps Mindset.
• Demonstrated experience in working in a multi-cultural and multi-disciplinary environment.
• Good communication skills in English.

Desirable Skills/Experience

• Relevant certifications such as Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKSS).
• Familiarity with popular DevOps tools (e.g., Jenkins, Git, Terraform) to enhance our Kubernetes development pipeline.
• Experience with CI/CD tools and practices integrated with Kubernetes, driving continuous improvement and deployment.
• Familiar with cloud-native deployment strategies to cloud service providers (e.g., Azure Cloud, Amazon Cloud, Google Cloud).
• Familiar with the main cloud service models: Software as a Service, Platform as a Service and Infrastructure as a Service.

Essential / Desirable Traits

• Possess learning agility, flexibility and pro-activity
• Comfortable with agile teamwork and user engagement