DevSecOps Engineer (IAM)

Assurity Trusted Solutions Pte Ltd; Singapore; On-site; SGD 90,000 - 120,000; Full time

Benefits offered by this job

2-year contract

GovTech subsidiary

Direct contract

Job summary

Assurity Trusted Solutions Pte Ltd is seeking a DevSecOps Specialist to design and manage CI/CD pipelines, automate security tooling, and optimize AWS cloud infrastructure. You will implement security-first practices across the software lifecycle and collaborate with development and operations teams to strengthen defenses.

Ideal candidates have 4+ years in DevSecOps or cloud services management, proficiency in GitLab CI/CD, and hands-on experience with SCA, container scanning, and penetration

Qualifications

• Degree in Information Technology or related field.
• Min 4 years of DevSecOps or Cloud Services management experience with AWS/Azure.
• Hands-on experience with GitLab CI/CD pipelines.
• Experience with SCA, container scanning, and penetration testing.
• Nice to have: GCC-2.0.

Responsibilities

• Design, implement, and manage CI/CD pipelines with GitLab.
• Develop automated scripts to enhance DevSecOps processes like SCA and container scanning.
• Manage AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB).
• Apply security best practices in cloud environments and incident response.
• Collaborate with Dev and Ops to embed security in SDLC.
• Conduct regular security assessments and vulnerability testing.
• Monitor security incidents and provide corrective actions.

Skills

GitLab CI/CD

Python scripting

Bash scripting

Docker

Kubernetes

Security principles

Incident response

Cloud monitoring

Communication

Education

Information Technology

Tools

Terraform

CloudFormation

GCC-2.0

Job description

Role and Responsibilities

• Design, implement, and manage CI/CD pipelines using GitLab to support continuous integration, delivery, and deployment
• Develop and maintain automated scripts and tools to enhance DevSecOps processes including SCA (Software Composition Analysis) and container scanning
• Manage and optimize AWS services including ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, and NLB to ensure secure and efficient cloud infrastructure
• Implement security best practices in cloud environments, focusing on identity management, logging, monitoring, and incident response
• Collaborate with development and operations teams to promote a security-first mindset and embed security practices throughout the software development lifecycle
• Conduct regular security assessments, vulnerability scans, and penetration tests to identify and remediate security weaknesses
• Monitor and respond to security incidents and anomalies in real-time, providing analysis and recommendations for corrective actions
• Stay up-to-date with the latest security trends, vulnerabilities, and technologies to ensure robust defenses against potential threats
• Good to Have: Knowledge in MS Entra, MS Graph API, Node.js, MongoDB, and AWS Lambda (Python Serverless)

Requirements

Qualifications:

• Education: Information Technology, or a related field
• Experience:
• Min 4 years of proven experience in DevSecOps and/or Cloud Services management and deployment, with a strong focus on AWS and/or Azure services
• Hands-on experience with GitLab CI/CD pipelines
• Experience with security tools and practices including SCA, container scanning, and penetration testing
• Good to Have: Experience with GCC-2.0
• Skills:
• Proficiency in managing AWS services (ECS, ECR, Aurora, WAF, Network Firewall, Transit Gateway, ALB, NLB)
• Strong scripting skills (Python, Bash, etc.) for automation
• Familiarity with containerization technologies (Docker, Kubernetes)
• Excellent understanding of security principles and best practices
• Strong problem-solving skills and attention to detail
• Excellent communication and teamwork skills

Preferred Qualifications

• Certifications:
• Required: Associate-level AWS certifications (e.g., AWS Certified SysOps Administrator, AWS Certified Developer)
• Good to have: Azure certifications (e.g., SC-300, AZ-104)
• Additional Experience:
• Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation
• Background in software development with knowledge of secure coding practices
• Soft Skills:
• Ability to thrive in a fast-paced, agile environment
• Proven track record of proactive problem-solving and innovation

Join us and discover a meaningful and exciting career with Assurity Trusted Solutions!

The remuneration package will commensurate with your qualifications and experience. Interested applicants, please click "Apply Now".

We thank you for your interest and please note that only shortlisted candidates will be notified.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS's privacy statement which can be found at: or such other successor site.

Benefits

• A wholly-owned subsidiary of GovTech
• Contract Staff enjoys the same benefits as Permanent Employeees
• This is a 2-year direct contract