DevSecOps Engineer | CI/CD, Cloud & Cybersecurity

NEXBRIDGE RECRUITMENT PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

NEXBRIDGE RECRUITMENT PTE. LTD. is seeking a DevSecOps oriented professional to automate deployment, monitoring and security across cloud-native environments in Singapore. The role focuses on building CI/CD pipelines, IaC, and secure software release processes with emphasis on automation and reliability.

You will work with AWS-based infrastructure, implement security controls, tackle vulnerability management, and collaborate with developers to harden systems and improve operational excellence.

Qualifications

• Experience with SDLC, CI/CD, TDD and DevSecOps practices.

Responsibilities

• Develop automation capabilities to deploy, manage, monitor and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management, and develop and maintain CI/CD tooling and automation that support software build, testing, integration and release.
• Implement infrastructure-as-code and environment automation practices, and manage cloud resources and platform services.
• Monitor and optimise platform availability, performance, utilisation, reliability and operational health.
• Investigate, troubleshoot and resolve system, application and infrastructure issues.
• Implement security controls and ensure compliance with government security requirements.
• Plan, implement and monitor system security architecture, including threat and risk assessments, and conduct vulnerability assessments, system hardening, security reviews and remediation activities.
• Implement disaster recovery, backup and business continuity measures
• ,
• Collaborate closely with developers to integrate security.

Skills

SDLC

CI/CD

TDD

DevSecOps

AWS

Bash

Python

Cloud security

Vulnerability management

Terraform

Ansible

Docker

Kubernetes

GitLab

Monitoring

IAM/Networking (AWS)

Prometheus

ArgoCD

Istio

Vault

NexusIQ Fortify Tenable

Tools

Terraform

Ansible

Docker

Kubernetes

GitLab

Prometheus

ArgoCD

Istio

Gatekeeper

Crossplane

Vault

Tenable Fortify NexusIQ

Job description

Job Responsibility

• Develop automation capabilities to deploy, manage, monitor and maintain applications and infrastructure.
• Design and maintain CI/CD pipelines for application deployment and release management, and develop and maintain the CI/CD tooling and automation that support software build, testing, integration and release.
• Implement infrastructure-as-code and environment automation practices, and manage cloud resources and platform services.
• Monitor and optimise platform availability, performance, utilisation, reliability and operational health.
• Investigate, troubleshoot and resolve system, application and infrastructure issues.
• Implement security controls and ensure compliance with government security requirements.
• Plan, implement and monitor system security architecture, including threat and risk assessments, and conduct vulnerability assessments, system hardening, security reviews and remediation activities.
• Implement disaster recovery, backup and business continuity measures
• Collaborate closely with developers to integrate security.

Job Requirement

• Strong understanding of the Software Development Lifecycle (SDLC), CI/CD, Test-Driven Development (TDD) and DevSecOps practices.
• Experience designing, deploying and supporting cloud-native applications and infrastructure on AWS.
• Proficiency in at least two programming or scripting languages, such as Bash, PowerShell, Python, JavaScript or Java.
• Strong knowledge of application and cloud security, secure coding practices and DevSecOps principles.
• Hands-on experience with vulnerability management, security assessments, system hardening and remediation activities.
• Experience with infrastructure-as-code and automation tools such as Terraform, Ansible or equivalent technologies.
• Experience with containerisation and orchestration technologies, including Docker and Kubernetes.
• Experience with source code management, GitLab workflows and CI/CD platforms.
• Experience implementing monitoring, logging and observability solutions to support platform reliability and operational excellence.
• Experience with AWS services covering identity and access management, networking, monitoring, container platforms and security.
• Familiarity with cloud-native and Cloud Native Computing Foundation (CNCF) tools, including Prometheus, Helm, ArgoCD, Istio, Gatekeeper and Crossplane.
• Familiarity with enterprise security and secrets management solutions, including HashiCorp Vault, Tenable, Fortify, Sonatype Nexus IQ and AWS security services.
• Strong troubleshooting, incident response and operational support skills.

We regret that only shortlisted candidates will be notified.