DevSecOps Engineer

USER EXPERIENCE RESEARCHERS PTE. LTD; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

USER EXPERIENCE RESEARCHERS PTE. LTD is seeking a security-conscious engineering professional to design, automate, and maintain scalable infrastructure and deployment pipelines in a cloud-native environment.

You will implement IaC, manage AWS resources, and develop CI/CD tooling to support secure software delivery. Responsibilities include security assessments, vulnerability remediation, disaster recovery planning, and close collaboration with developers to embed security throughout the SDLC.

Qualifications

• Strong understanding of SDLC, CI/CD, TDD and DevSecOps practices.
• Experience deploying cloud-native apps and infra on AWS; government cloud environments advantageous.
• Proficiency in at least two scripting languages (Bash, PowerShell, Python, Javascript, or Java).
• Experience with IaC and automation tools such as Terraform, Ansible, or equivalent.
• Experience with Docker and Kubernetes for containerization/orchestration.
• Experience with GitLab workflows and CI/CD platforms.
• Experience with monitoring, logging and observability solutions.
• Knowledge of application security and cloud security, secure coding, and DevSecOps.
• Hands-on vulnerability management, system hardening, remediation activities.
• Familiarity with CNCF tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management (Vault, Tenable, Fortify, Nexus IQ, AWS security).
• Experience with AWS identity, networking, monitoring, container platforms, and security.
• Strong troubleshooting, incident-response, and operational support skills.
• Experience in regulated or government environments preferred.

Responsibilities

• Design, automate, and maintain secure, scalable infrastructure and deployment pipelines.
• Develop automation to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling to support build, testing, integration and release processes.
• Monitor and optimize platform availability, performance, reliability, and health.
• Implement security controls and ensure compliance with applicable security requirements.
• Plan, implement, and monitor security architecture including threat/risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infra issues.
• Collaborate with developers to embed security in the SDLC.
• Coordinate and work with team members.

Skills

SDLC

CI/CD

DevSecOps

AWS

Cloud-native

Bash

PowerShell

Python

Javascript

Terraform

Ansible

Docker

Kubernetes

GitLab workflows

Prometheus

ArgoCD

Istio

Vault

Tenable

Fortify

Nexus IQ

HashiCorp Vault

Security assessments

Tools

Terraform

Ansible

Docker

Kubernetes

GitLab

Prometheus

Helm

ArgoCD

Istio

Gatekeeper

Crossplane

HashiCorp Vault

Tenable

Fortify

Nexus IQ

AWS security services

Job description

Key Responsibilities:

• Responsible for designing, automating, and maintaining secure, scalable, and resilient infrastructure and deployment pipelines:
• Develop automation capabilities to deploy, manage, monitor, and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management.
• Implement infrastructure-as-code and environment automation practices.
• Manage cloud resources and platform services.
• Develop and maintain CI/CD tooling and automation to support software build, testing, integration and release processes.
• Monitor and optimize platform availability, performance, utilization, reliability, and operational health.
• Implement security controls and ensure compliance with applicable security requirements.
• Plan, implement, and monitor system security architecture, including threat and risk assessments.
• Conduct vulnerability assessments, system hardening, security reviews, and remediation activities.
• Implement disaster recovery, backup, and business continuity measures.
• Investigate, troubleshoot, and resolve system, application, and infrastructure issues.
• Collaborate closely with developers to integrate security throughout the software development lifecycle.
• Coordinate and work together with other members of the team.

Experience & Skills Needed

• Strong understanding of Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD) and DevSecOps practices.
• Experience designing, deploying, and supporting cloud-native applications and infrastructure on AWS. Experience with government cloud environments is advantageous.
• Proficiency in at least two programming/scripting languages (Bash, PowerShell, Python, Javascript, or Java).
• Experience with infrastructure-as-code and automation tools such as Terraform, Ansible, or equivalent technologies.
• Experience with containerization and orchestration technologies including Docker and Kubernetes.
• Experience with source code management, GitLab workflows, and CI/CD platforms.
• Experience implementing monitoring, logging and observability solutions to support platform reliability and operational excellence.
• Knowledge of application security and cloud security, secure coding practices, and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening and remediation activities.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools (Prometheus, Helm, ArgoCD, Istio, Gatekeeper, Crossplane).
• Familiarity with enterprise security and secrets management solutions (HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ, AWS security services).
• Experience with AWS services related to identity and access management, networking, monitoring, container platforms, and security.
• Strong troubleshooting, incidentresponse, and operationalsupport skills.
• Experience working in regulatedor government environments ispreferred