DevSecOps Engineer (Must Have DevOps)

ITCAN PTE. LIMITED; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking an experienced DevOps Engineer to support the DataSphere platform on AWS Government GCC, building robust CI/CD pipelines and ensuring compliance with government security standards.

The role emphasizes Terraform IaC, GitLab CI/CD, and security tooling (SonarQube, Fortify on Demand, Nexus IQ), with collaboration across Data Engineers, Analysts, and security teams to maintain governance and reliability.

Qualifications

• Minimum 3 years of DevOps engineering experience in government or GCC environments.
• Experience delivering CI/CD pipelines with governance and security controls.
• Strong expertise in AWS services within GCC and related compliance requirements.
• Proficiency with IaC and automation tooling (Terraform preferred).
• Experience with security scanning and vulnerability management tooling.

Responsibilities

• CI/CD Pipeline Management: Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
• Security and Compliance: Coordinate with security operations to ensure PDPIA and VMS compliance.
• Platform Operations: Monitor performance and manage secrets, encryption keys, and data retention policies.
• Collaboration and Support: Work with Data Engineers, Analysts, and security teams across government divisions.

Skills

AWS GCC

Terraform

GitLab CI/CD

SonarQube

Fortify on Demand

Nexus IQ

SHIP-HATS tools

Containers

Python

Bash

PowerShell

Govt security compliance

Tools

GitLab CI/CD

Terraform

SonarQube

Fortify on Demand

Nexus IQ

SHIP-HATS tools

Job description

Ideal candidate

****** Please focus and source for DevOps experience with deep AWS GCC expertise, Terraform IaC, GitLab CI/CD, and government security compliance. Databricks experience not required ************

Job Description

Position Overview

We are seeking an experienced DevOps Engineer to support the DataSphere platform, a comprehensive data lakehouse solution built on AWS Government Commercial Cloud (GCC) environment. The successful candidate will be responsible for implementing robust CI/CD pipelines using government-approved tools, and ensuring compliance with stringent security and governance requirements.

Key Responsibilities

CI/CD Pipeline Management:

Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem

Configure GitLab for version control and automated deployment workflows

Implement code quality gates using SonarQube for static code analysis

Manage security scanning using Fortify on Demand (FOD) for vulnerability assessment

Oversee dependency scanning and management using Nexus IQ

Coordinate with CloudSCAPE for security compliance scanning and remediation

Security and Compliance:

Implement and maintain Automated Baseline Log Review (ABLR) systems

Coordinate with GovTech Cyber Security Operations Centre (GCSOC) for security monitoring

Manage Central Accounts Management (CAM) integration for user access control

Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT) findings.

Ensure compliance with Personal Data Protection Impact Assessment (PDPIA) requirements

Implement and maintain Vulnerability Management System (VMS)

Platform Operations:

Monitor system performance and implement optimization strategies

Manage secrets and encryption key rotation for data protection

Configure email notifications for data processing status and error alerts

Implement and maintain data retention policies

Support SaaS whitelisting processes and approvals

Coordinate System Security Acceptance Testing (SSAT) activities

Collaboration and Support:

Work closely with Data Engineers, Data Analysts and security technical team.

Support multiple datamarts

Provide technical guidance for Raw-to-Tech and Tech-to-Business data pipelines

Collaborate with various government divisions and stakeholders

Support training environment setup for user onboarding and skill development

Required Qualifications

Technical Skills:

Strong expertise in AWS services, particularly in GCC environment

Proficiency in Infrastructure-as-Code tools, preferably Terraform

Experience with GitLab CI/CD pipeline development and management

Knowledge of security scanning tools (SonarQube, Fortify, Nexus IQ)

Understanding of government security frameworks and compliance requirements

Experience with containerization and orchestration technologies

Strong scripting skills in Python, Bash, or PowerShell

Security and Compliance:

Experience with government security clearance processes

Knowledge of data classification and handling procedures (Sensitive High)

Understanding of encryption mechanisms and key management

Familiarity with vulnerability management and remediation processes

Strong scripting skills in Python, Bash, or PowerShell

Experience with security monitoring and incident response procedures

Certifications (Preferred):

AWS Certified DevOps Engineer

Required Experience

Minimum 3 years of DevOps engineering experience

Experience working in government environments, esp in GCC.

Experience in agile development methodologies

Personal Attributes

Good communication and collaboration abilities

Attention to detail and commitment to security best practices

Strong documentation and knowledge sharing practices

Proactive approach to system monitoring and maintenance