DevSecOps Engineer: Azure & Kubernetes Platform

NCS; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

NCS is seeking a DevSecOps Engineer to own the security, reliability and delivery of our Azure platform and Kubernetes workloads. You will be the hands-on engineer for secure-by-default infrastructure, automating everything-as-code, and partnering with product teams to ship code quickly without compromising security or resilience.

In this role you will design Azure Landing Zones, operate AKS with tight security controls, and standardize CI/CD pipelines using GitHub Actions and Azure DevOps,

Qualifications

• 7+ years in DevOps/SRE/Platform Engineering with Azure experience.
• Proven delivery of Azure Landing Zones or enterprise Azure foundations.
• Strong with GitHub Actions/Azure DevOps, pipelines, approvals, reusable workflows.
• Hands-on with container security policies (OPA/Kyverno) and image scanning.
• Networking security with Kubernetes NetworkPolicy and TLS.

Responsibilities

• Build and evolve Azure Landing Zones and policy guardrails.
• Design & operate private AKS clusters with security controls.
• Standardize pipelines in GitHub Actions / Azure DevOps; enforce SBOM and image signing.
• Implement Entra ID RBAC, Managed Identities, Key Vault and secret rotation.
• Establish monitoring with Azure Monitor/Logs, SLOs, alerts; coordinate incident response.
• Drive Defender for Cloud coverage and automated remediation.
• Configure hub-spoke networks, Private Link, encryption in transit and at rest.
• Backups/DR planning and testing; codify runbooks.
• Tagging/budgets, CIS/NIST/ISO mappings; provide audit evidence.
• Coach product teams; uplift platform literacy and provide templates.

Skills

Azure

Kubernetes

GitHub Actions / Azure DevOps

Terraform / Bicep

Security by design

Policy enforcement (OPA/Kyverno)

Network security

Tools

Acr / private registries

Nessus

Argo CD / Flux

Entra ID / PIM

Job description

NCS is seeking a DevSecOps Engineer to own the security, reliability and delivery of our Azure platform and Kubernetes workloads. You will be the hands-on engineer for secure-by-default infrastructure, automating everything-as-code, and partnering with product teams to ship code quickly without compromising security or resilience.

In this role you will design Azure Landing Zones, operate AKS with tight security controls, and standardize CI/CD pipelines using GitHub Actions and Azure DevOps,