DevSecOps Engineer — AWS GCC, CI/CD & Security

OpenTalent; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

OpenTalent in Singapore seeks an experienced DevOps Engineer to support the DataSphere platform on GCC. You will implement robust CI/CD pipelines, enforce security and governance, and collaborate with data engineers and security teams.

The role emphasizes automation, IAM integration, vulnerability management, and compliance with PDPIA. Strong AWS/GCC, IaC, and code quality tooling are essential.

Qualifications

• Strong expertise in AWS services within GCC environment.
• IaC tooling experience, preferably Terraform.
• GitLab CI/CD pipeline development and management.
• Knowledge of security scanning tools (SonarQube, Fortify, Nexus IQ).
• Understanding of government security frameworks and compliance requirements.
• Experience with containerization and orchestration technologies.
• Strong scripting skills in Python, Bash, or PowerShell.

Responsibilities

• Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
• Configure GitLab for version control and automated deployment workflows.
• Implement code quality gates using SonarQube for static analysis.
• Manage security scanning using Fortify on Demand for vulnerability assessment.
• Oversee dependency scanning with Nexus IQ.
• Coordinate with CloudSCAPE for security compliance scanning and remediation.
• Monitor system performance and implement optimization strategies.
• Manage secrets and encryption key rotation for data protection.
• Coordinate SSAT activities and training environments.
• Collaborate with Data Engineers, Data Analysts and security teams.

Tools

AWS GCC

Terraform

GitLab CI/CD

SonarQube

Fortify

Nexus IQ

Containerization

Kubernetes

Python

Bash

PowerShell

Security frameworks

Job description

OpenTalent in Singapore seeks an experienced DevOps Engineer to support the DataSphere platform on GCC. You will implement robust CI/CD pipelines, enforce security and governance, and collaborate with data engineers and security teams.

The role emphasizes automation, IAM integration, vulnerability management, and compliance with PDPIA. Strong AWS/GCC, IaC, and code quality tooling are essential.