DevSecOps Engineer - #1659

JOBSTER PRIVATE LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

JOBSTER PRIVATE LTD. is seeking an experienced DevSecOps engineer to design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS in a Singapore environment.

You will integrate Fortify, Nexus IQ and SonarQube, applying shift-left security across the SDLC and automating builds, tests, security scans and deployments. Responsibilities include containerised deployments with Docker/Kubernetes (EKS) and secure management of credentials and secrets, plus creating reusable templates

Qualifications

• Degree or Diploma in Computer Science, Information Technology or related discipline.
• Hands-on experience with GitLab CI/CD pipelines and runners.
• Strong understanding of SDLC, DevSecOps and shift-left security (SAST/DAST/SCA, security gates).
• Experience integrating Fortify, Nexus IQ and SonarQube into CI/CD pipelines.
• Experience with Git, Docker and Kubernetes, with AWS/EKS environments.
• Scripting in Python, Bash, PowerShell or equivalent.
• Working knowledge of Linux, networking, access control and secrets management.
• Strong troubleshooting skills across CI/CD, security tooling and deployments.
• Added Advantage: SHIP-HATS experience; IaC with Terraform/Ansible/AWS CloudFormation; Helm/Argo CD; SBOM knowledge; Gov/regulatory DevSecOps experience.

Responsibilities

• Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS.
• Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement security gates.
• Apply shift-left security across the SDLC including code, dependencies, containers and deployments.
• Automate build, testing, security scanning and deployment across dev and prod environments.
• Support containerised deployment using Docker and Kubernetes/EKS.
• Manage pipeline credentials, secrets and service accounts securely.
• Develop reusable pipeline templates and standardise DevSecOps practices across AE apps.
• Troubleshoot pipeline, security scanning and deployment issues and assist developers with findings.

Skills

GitLab CI/CD

DevSecOps

Shift-left security

Docker

Kubernetes

AWS/EKS

Python

Bash

Linux

Secrets management

SAST

DAST

SCA

Fortify

Nexus IQ

SonarQube

Terraform

Ansible

AWS CloudFormation

Helm

Argo CD

SBOM

Education

Degree or Diploma in CS/IT

Tools

GitLab Runners

Fortify

Nexus IQ

SonarQube

Terraform

Ansible

AWS/EKS

Job description

Responsibilities

• Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.

• Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.

• Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.

• Automate application build, testing, security scanning and deployment across development and production environments.

• Support containerised application deployment using Docker and Kubernetes/EKS.

• Manage pipeline credentials, secrets and service accounts securely.

• Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.

• Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.

Experience and Skills Needed

• Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.

• Hands‑on experience with GitLab CI/CD, including pipeline configuration and GitLab Runners.

• Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.

• Experience integrating application security and code‑quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.

• Experience with Git, Docker and Kubernetes, with working knowledge of AWS/EKS environments.

• Scripting experience using Python, Bash, PowerShell or equivalent.

• Working knowledge of Linux, networking, access control and secrets management.

• Strong troubleshooting skills across CI/CD, security tooling and application deployment.

Added Advantage

• Hands‑on experience with SHIP-HATS, particularly CI/CD and DevSecOps implementation.

• Experience with Infrastructure as Code using Terraform, Ansible or AWS CloudFormation.

• Experience with Helm, Argo CD or similar Kubernetes deployment/GitOps tools.

• Knowledge of SBOM and software supply-chain security.

• Experience with DevSecOps implementation in Singapore Government or regulated environments.